{"type": "bundle", "id": "bundle--ef08b3c0-4641-4f8a-af4c-96ac24236cef", "objects": [{"type": "identity", "spec_version": "2.1", "id": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "name": "James Brine", "identity_class": "individual", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "location", "spec_version": "2.1", "id": "location--52775789-5e4f-4064-ab23-9fdc938471a6", "name": "DigitalOcean London", "latitude": 51.5177, "longitude": -0.6215, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "GB"}, {"type": "location", "spec_version": "2.1", "id": "location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9", "name": "DigitalOcean Toronto", "latitude": 43.6547, "longitude": -79.3623, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "CA"}, {"type": "location", "spec_version": "2.1", "id": "location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e", "name": "Vultr Melbourne", "latitude": -37.8136, "longitude": 144.9631, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--33434518-b664-48a1-9ff5-e3245c3ded1a", "name": "Vultr Paris", "latitude": 48.8566, "longitude": 2.3522, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "FR"}, {"type": "location", "spec_version": "2.1", "id": "location--1ee25cf1-1579-443d-9756-5aeed24e6f24", "name": "Vultr Tokyo", "latitude": 35.6762, "longitude": 139.6503, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "JP"}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--ffd0b089-f906-469f-b027-bd06f0a086e1", "name": "Cloudflare Global Edge", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--909e46f2-f176-41aa-8212-8171827d0474", "name": "DigitalOcean London", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a32b9ff2-f6eb-488e-a215-feb8bb6fe539", "relationship_type": "located-at", "source_ref": "infrastructure--909e46f2-f176-41aa-8212-8171827d0474", "target_ref": "location--52775789-5e4f-4064-ab23-9fdc938471a6", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--f2bf93a5-6135-41da-8f25-7a9c04b417d2", "name": "DigitalOcean Toronto", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fcffb73e-3bb1-4866-81b5-72749c71cf82", "relationship_type": "located-at", "source_ref": "infrastructure--f2bf93a5-6135-41da-8f25-7a9c04b417d2", "target_ref": "location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--4d944301-882d-4af8-bb84-edcf3f9708b6", "name": "OpenCLAW Dashboard Decoy", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--1110a957-2697-4404-8b08-adf3624688d9", "name": "Vultr Melbourne", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a98696f4-984d-491a-9da7-b9b4241e4e36", "relationship_type": "located-at", "source_ref": "infrastructure--1110a957-2697-4404-8b08-adf3624688d9", "target_ref": "location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--96f3bd4b-4e6d-43c4-b8a7-deb83d33fffa", "name": "Vultr Paris", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--101eb43e-bff0-418d-b9e0-01b90d42f36d", "relationship_type": "located-at", "source_ref": "infrastructure--96f3bd4b-4e6d-43c4-b8a7-deb83d33fffa", "target_ref": "location--33434518-b664-48a1-9ff5-e3245c3ded1a", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--8ec6b32e-bfae-45c2-81e9-bf35bd73c5b9", "name": "Vultr Tokyo", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--88a6e617-b7f6-49e0-a63a-98014666d168", "relationship_type": "located-at", "source_ref": "infrastructure--8ec6b32e-bfae-45c2-81e9-bf35bd73c5b9", "target_ref": "location--1ee25cf1-1579-443d-9756-5aeed24e6f24", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--0f503f92-1c5b-4357-bd56-bd6059070790", "name": "CVE-2023-1389", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e68965-daf2-4687-97da-28ddaa1b3063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.119.194.226']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb2efb15-aebc-459b-a64b-27e76198652e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.207.36.75']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c359a99f-b682-414b-9731-3c63a86c9b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.207.38.41']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5afe2479-8104-40da-9ba2-211419cd8d0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.207.39.124']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9500f18-1fca-41f2-9641-7a4e9ebb017c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.241.25.74']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc0f955-06c9-464b-8b7e-f68516ea720d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.9.164.197']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f53f09-3a8d-4718-8863-166e60f9a984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.153.226']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a134ad8-2c30-4b6e-a666-ba54767db8fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.1']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98fde59a-3f8e-46ed-9bf7-32740fc00ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.101']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d2adb8-fef7-484e-a7c9-b81a23cc9ac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.106']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a59b826-cf02-497c-b81b-7201920d6d00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.108']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee95e42-53d4-4076-9de3-4164c1292edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.112']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31589cc6-4625-437d-bfb0-b251b341c9d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.12']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40faf87e-795c-4d58-9f9b-b79336b68155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.19']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7223e17c-2ba6-429f-b39f-09a02eca8688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.29']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--252aa593-6194-4178-8838-0b6c9d1fb1ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.32']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d9d6d8-2865-4b83-b3d8-2488c3f98e97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.33']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d8bda4-92da-4879-a309-e20e658b625c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.41']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74843b6f-348e-4eb8-bc6d-292456b294ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.47']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dddb5bb0-7da7-43d1-bfa0-4fbc2b8ba86f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.52']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37a6669b-d78b-4cd1-a0f9-db8ce0aa32a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.63']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3503095-5c06-4b4b-a7f1-5a43e0103a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.8']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7043d13d-3670-4141-ad5d-a2589a710d34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.81']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--623fd51e-136a-4230-ab0f-ed28786cbb4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.82']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5de548b-7c8f-43b0-aeb0-72ca6ef7d09c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.90']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a46ab5be-c963-4ba9-bbfc-0c40dd5fa21c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.97']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdb002c0-ea1c-4b2b-85e6-515241be4fde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.49.117.77']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee92d9b4-ee65-4202-8260-3b729b2a2dee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.50.17.159']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a40d668-1936-42f5-8d18-6975e0bdc074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.201.81.98']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9efb51d5-a6f1-46ec-b562-7b61ab835653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.206.108.14']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--132b223c-94cc-49d1-9ae6-877a68417712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.26.172.226']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53f4ffb1-59a3-488e-b665-fb8f4ed3ed37", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.240.31']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8af032cb-e6ad-4af6-91d4-e72e652efa21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.105.94']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d7b3ef-3eb5-4b05-bbaf-6ca1f084a08a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.78']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f465d6e0-3871-4a8e-93d8-5fe85c9f993d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.243']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d794cc0c-3e2e-472f-a4c4-c09423bdf7d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.133']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e75f15-8630-4c14-ae27-273b65224b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.110.201']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff04b28-6b31-4fc3-bc73-9bd0fee91422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.112.101']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2950ba79-3a2a-4fd4-800e-592333e76295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.198']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa60bc34-8118-44d2-94ca-17bc228d8793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.209']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17694b9f-21ba-473a-ace6-571ddd63f0d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.148']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b961457e-d4e4-4759-b959-b9cc7d85a0dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.119.146']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8faf6735-2050-4161-87cf-67d80d8d8e59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.124.220']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60a68eae-8933-4b27-9dee-05cb5dc311fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.172']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f20a66e-1cd4-4ceb-b05f-5c3347e04474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.205']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--232998e5-d4ce-4876-a666-cd197fb3b523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.74']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a67a33af-e1e5-41d4-9455-ce553002d91e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.51.89.110']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1fb3965-025d-4f8f-93be-2d211b8bba34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.195.62']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c9ef9fd-fa6a-4600-b4f4-af9bbff4a52f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.186.123']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60856352-0048-4bd4-ad90-27da49a4ccd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.186.87']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc447b8-57ef-4d21-b317-04e5a8fd9483", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.213.182.39']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb24b2a-f350-45ec-b7a6-cbaad2dde3ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.22.42.165']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a182c159-c7a9-419e-9512-bd5b48122830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.223.47.171']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed9ab14f-9200-4026-ab19-182a952b9614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.67.141.165']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7642a2e-07e0-4b2d-9755-c3cd123e1244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.88.21.136']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7704fb0c-c7dc-48f3-956c-ddd08d607e77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.1.210.25']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c71afd5-517b-4930-80a9-c0620492b84d", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.103.21.51']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f3be993-ea3e-4d49-a3cb-d5b87a4e43ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.108.97.54']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1842749a-6a96-480f-88f6-6c0f67a0164b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.110.164.69']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf4a7b2-af9a-4289-9922-aa38b2b97a7d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.115.48.229']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--642871b4-0cf8-4111-8af3-7b36308c8547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.120.189.68']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd7d5af3-98bc-4ff7-8476-44c48178a8b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.123.226.10']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea5cd402-00ac-44e4-b4ac-cdabac33bd16", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.123.226.138']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e3ecc8-fbe2-4632-8971-ed08982a9df5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.192']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f254b686-fbf2-473e-ad0c-f622204481b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.224']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc6e10b5-a6ba-4fc3-b251-72abc71f5473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.143.10.79']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f7a6a3-805a-4ffb-9c7e-5d6a55495665", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.146.177.202']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59d7a3e9-3143-444e-986a-af158357276e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.26.230']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15b02218-31d3-4842-96d9-3536259354a6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.159.85.123']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03596420-be9b-4adf-923c-9f66da66ab77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.161.34.59']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf411c4a-41f6-4360-82be-9332cd3c19c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.163.17.164']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bef1dfc-83ab-47c9-81b5-52bcb3fbcc55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.172.20.218']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86d99ba-d238-49b3-9c4e-b4d3d6d30ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.227.136']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fbc1c2e-da01-4f25-92ba-c60a622369e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.175.51.88']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dba18c4-9eee-4c61-94b4-a39bbf75bb04", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.20.115']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e677a3-34c7-4a9b-a452-f66ad20a0d9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.186.22.227']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d91b303-76cb-4ae1-836d-672c379281a1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.187.26.126']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59adce1-cd0a-4e5f-8680-499d72a0224e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.210.22.74']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca8f1be-139b-4e5d-9723-1b111d23b96e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.213.160.31']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--174a91b6-6aa0-4e4f-a8b2-510db01c3a79", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.214.5.133']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e18cca0b-2d71-4ad1-812a-6ab18846eb9b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.216.145.2']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4b7c0e5-245a-4d94-9ff7-5865ef86ae9b", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.218.240.172']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d758d6-0987-4028-91d4-eaf0f904c33e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.27']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28346a6-54e9-472e-a02e-3d3317a7c2f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.52']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b07918f9-8a6e-4ebe-a1b4-b87be9dfde97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.80']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdbb59bf-0b12-4f11-b6cb-45c1a4cae31b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.96']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa838e9-c358-4417-ace4-9ec0d2a0808d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.239.252.66']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a927c1fd-8d0d-4ba2-8909-d4518c4e870c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.241.43.193']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9caec443-5881-4599-b482-0c7fe2b0d325", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.243.26.174']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2179b38-c748-4fdb-9721-0af05fde9cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.247.61.20']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d378d62-372a-42fd-b816-ed37d007adc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.54.101.203']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3ef8c24-111b-4f45-8d5c-07deee7247ec", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.54.101.216']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5725a160-b6e9-4cf6-bead-46ff439d61a4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.56.148.173']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9fe3a72-a9f0-4e10-8997-6b6e69409aee", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.68.68.121']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c8d6d8c-fb17-45e8-bd7f-f78391245ff7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.71.61.101']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f390f3f-4bae-4dd2-97f3-214fd8bea67b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.74.21.127']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa28be57-787a-4658-897d-afca58f70398", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.74.5.44']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d5e453-1144-42db-bbac-e9cf612e6f7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.242.90']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9585ae7-ee03-4564-b800-b63d9be2477e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.98.149.56']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f386ace-13da-4e6d-a935-112be5f187ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.131.175.19']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726c3987-b2ba-4c28-9b21-97bee894a89e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.140.148.82']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8f37812-bef7-4370-8c7e-9e6e51780f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.104.29']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--805b8466-3269-4f47-8dd7-dbdcfd629e85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.131.104']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d0f58f-8826-40c0-a178-91b9db19d831", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.154.215']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--024a6ebf-e939-4362-bf26-d5b3e3c5144a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.167.64.66']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1999ed0d-cd0c-42e7-84fe-3f4889176889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.154.210']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86728914-aba5-4805-b165-c2893881d5d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.209.11.209']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e42724a-e4c9-4985-9de5-32895b0ca863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.232.79.58']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e245582-b1fe-4919-8408-9d954eef4b92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.150.123']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d18aec52-57a8-438a-b9ab-439f5aae839c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.156.209']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c03cf2b-44cc-408f-b68d-528a4ad0b603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.240.112']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a60827-add4-468b-b522-2b04a2c3d00f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.104']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4691a72b-598b-480a-bf4e-923942f786ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.120']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dd6d2f7-8a51-4ae7-91f1-a43b0133bbdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.37.202']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a833907-d690-4f27-a94e-fc6a55913f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.114.81']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62523788-613c-4a04-ad5f-bae1ee027e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.130.34']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d2d33bf-67de-495a-98f5-e1fef32e5f85", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.55.173']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c46516da-199d-4623-a5c9-592fb3f46a87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.63.192']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41aaf08f-3328-4550-b693-99bfbcc98d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.251.180.164']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec31b91-1b06-4404-8a25-6515d1ab8820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.205.121']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d67cd99-658b-4aa1-8236-a2b0a1b3e355", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.35.136.34']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0922c8e9-4ef3-487b-8fc0-806cb6a0415c", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.184.70.160']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c02297-006b-43cd-a433-8fbc78aaa69c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.105.209.240']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b8cc7c-bf5a-4290-9f9e-3e94e13b4d9e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.74.119']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--248f82ba-92bc-4a96-ba7b-c183f38f9289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.124.147.169']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f0df2f0-d24f-4a8c-bddb-e2b1959dce4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.14.46.27']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0deffaf-6730-4cff-91e1-7db287653228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.192.19.67']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49525082-81d7-42eb-802e-4c88f8b0caa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.57.193.251']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b10ff3c-cc6d-4bdc-b364-9fbcc43f4d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.68.5.72']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7786e83-b421-40e8-adb1-0dbfa28edbe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.137.189']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4568c1a2-2052-4620-b3db-b745076bd15f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.139.1']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3423c0a-1450-4f40-b583-33412b969389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.202']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5e4d26-bd1c-49e0-86d3-c0c4dfdd0cf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.154.218']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a0fae3-89a3-4d13-b8d6-56317f56890d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.176.119']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f4d6a5a-5e83-44d3-97aa-ababfed2ac91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.189.53']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f461fe7-48ce-419c-9d33-6ccf285ef3dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.61']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d81bc830-eb6b-4fb3-bd0b-dadd2ffa9340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.73']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d78fa157-c99f-41e6-a12a-5995d0d820a8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.28.140']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--667265ce-8ffb-459b-b6fd-397db5f732d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.65.166']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8cd0b4-319a-43db-a286-4bbc9c275f40", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.0.200.227']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c714b0-32a7-4ac6-9daa-a3e5d0f11478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.102']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c0e9dec-3ba2-4033-861b-08ed7a2f3875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.105']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d6c5552-b0d1-4346-b5fe-240d35117208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.57']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b45501c-d3ed-4236-aa02-84b26f27a844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.199']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5409141c-3ab2-49a4-bd18-61cc297d12d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.47']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0daa4ff-fc4b-4390-ae74-cafcce88e8bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.89']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--567f4b6f-d7b4-4bc9-a512-d0fac65c9fce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.20']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97503a87-08a1-4b82-bbd8-01ccf70869d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.88']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cefb3f0e-1434-4f65-922a-569519465664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.176']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ef2d43f-f118-4f6c-a6bb-55c29e1a89af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.106.28']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--556c93c2-741e-488e-97ae-acbcfe408b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.110.13']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c9b840-d4ff-48a7-b6fc-b8d2311be77c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.110.170']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1612be58-f881-4272-bcf0-c5a7aa1cd080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.107']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2200bb1a-1be1-4c6e-bed5-b2ffe8fa01a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.67']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd25ef1-76b4-4601-a187-e219a7d2e989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.112.48']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c00ff554-63de-4d35-8322-3896f3af0076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.167']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a9f5775-135c-434b-b026-3ba30fd6e50e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.232']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c110a156-21ba-4aad-84a6-b8714feadafe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.228']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--532aad2f-bdca-4f27-a74a-32076cd6d331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.59']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb54f6dc-5bc4-479f-905d-8c1bc5146d4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.9']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5b3df4-9acc-4ba9-aeb0-8fffe6961e24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.56.47']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f73f2ad-3716-420e-93b5-8e8acd703dfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.146.37']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f97a4777-cc4e-40ac-9257-ec6a3847ea01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.182.172']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcac2416-5d3f-4f07-947e-17a7a52ac773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.175.212.220']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55df7cbe-d6f6-47ee-895a-ecf0614fc0b8", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.178.17.26']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bed829f2-088b-48ed-91d5-dc5bc1a83058", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.209.24']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d749766d-cfe8-483f-8a0f-d34018123fc8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.210.112']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--058a7274-a274-4462-b099-6cd1975d171e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.210.159']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c58ff2b-e773-44f2-b3e6-796dff66206c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.210.241']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--959c6ba4-00b7-48bf-a6cd-7e8429ea9843", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.211.237']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b9e19f-b2c2-41bd-b089-1d784e2d6612", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.217.182']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b125315-0b3c-415f-be81-d60caa6a3a4a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.217.83']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad2cf86d-99f1-4079-a175-800957bfda33", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.219.150']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99d0055c-4dfe-423e-b7dd-3e278dfa5292", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.220.142']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041ae5aa-a069-4ece-b90c-092df317e719", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.220.151']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c08b3d4-f588-4ebb-847a-82169d4711bd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.220.174']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--768753c8-123f-49af-b965-2bc202f819f7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.221.129']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f423bae2-d618-4793-9697-0450c99bc55c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.222.64']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26389ff3-4cda-41be-955f-550803bca6f2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.223.153']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b07d641-55e7-4d85-b2ac-7c2488f545af", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.225.94']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd262a5-05c5-46dd-8bf3-e09f4c38791f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.2.217']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4c4e357-93ab-4f89-95c2-1def10446e97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.12']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b293e5-9366-44f3-8be5-4eb331c6e29c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.13']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--437445b5-bf97-410a-8882-ac5b4678d4cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.75']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07ba61ce-e1cf-43e6-a9f2-f9b39637d5e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.211.10']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e33c750-c4d6-4762-8897-e1d0c7d5e2da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.211.11']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4870349c-6165-4765-9267-bcb3f1000660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.211.15']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc08470a-3bee-44f9-bd43-adaf58e769ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.211.16']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e581bc30-f96f-4828-8f73-9ba508224b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.211.2']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85319457-3861-49be-9b40-7e3b60ed809a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.211.6']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9834799d-4448-473c-bc67-64992532b80a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.211.9']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c507012-4d1b-40aa-a048-5aa91e08d380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.211.100']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a19cd71-9238-4e06-a69d-58e8b0512102", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.91.4.177']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f9e69a-36f2-4823-b758-63b24589cdd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.94.87.173']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd79d5c-af82-47c6-9e03-06412903cf12", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.10.176.51']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c34082-5551-4a4f-9518-b2d0aac6adc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.177.182.63']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20bf87bf-c633-42ef-8f53-401a8f0585c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.24.32.28']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38bc32f9-8c3e-4137-9348-a08f45448c95", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.4.40.114']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791a75ff-4711-4c17-9f00-fa4f2099ddac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.42.208.131']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0eb3b29-ee56-4c3e-8018-0fbad86663c0", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.119.60.40']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2c0cf5f-49d5-4a90-bd12-b3dc5ceaba62", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.176.100.107']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fba90be-de9c-4b9f-9dee-435896eafee1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.228.33.97']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5e979b-e580-4ba1-a296-95fe6579686e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.228.60.252']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d66759a-0b42-470e-bf49-2d1d778f1b5a", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.246.91.45']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16393015-f3db-48f0-bfc6-c5afff534b18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.33.71.238']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6354f1a3-2bec-45dc-acba-51f9ee8a1e8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.48.160.201']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0d4619-1336-4e39-9dd6-b1fa75c64bee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.53.0.169']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51099f24-d004-43d4-8daf-7d78bbe20473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.61.20.185']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b342dd0e-61a9-4079-ac4b-39ece1231cfa", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.151.178.49']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92d580eb-3f01-4464-96fb-5fccee690738", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.196.78.4']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75bf1c65-ae84-4821-8fe6-8bd63f31222e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.219.151.50']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c78b5c2-1d67-4dfc-984e-e7fa081e1a47", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.232.52.65']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1846f1d1-079a-4941-a3e1-72a14c92c2a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.254.202.137']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e57aad-3d38-43c6-8b34-08d0d11aa2dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.74.160.80']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007b3592-ff30-460b-a5fa-6afc1e99d2a9", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.128.205.44']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d953df77-493a-45a8-ad9e-152ae7c45b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.206.178.140']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2878203c-6322-4f09-847b-130b300d3cf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.215.188.168']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d65db76c-38ef-4809-a32c-02aba14ed99e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.215.189.40']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--449363b5-dcf3-4667-b553-ac8da01c5a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.221.27.136']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--102a4998-ffc5-44c8-98ba-d0c1b00e4fcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.240.216.163']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb8d3b1-a704-48ae-9dc9-642bb72b3e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.58.69.235']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--600e6af9-5994-45f8-a0b0-42f17485b280", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.111.53.116']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45fabdbc-10b9-4241-9d3c-59677320a914", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.128.14']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98836f97-f3b8-4ae5-91ca-58d5d736ca56", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.128.154']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649c6207-872a-410a-92eb-bc71f4359275", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.129.14']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce099d56-0d0b-4af0-9908-f209dc23b06a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.129.175']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd690c1-fb45-432a-a729-9278a3ab9812", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.131.182']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d29b0df7-5672-4c7f-b3fe-9192ca4a951a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.131.203']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--367a2187-4cd5-450f-b73a-bc6f000b7f3b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.131.90']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b8c7dfc-9335-4585-b7c8-73a22d749f23", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.132.28']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dacd14a-b34e-4b7f-b5c4-5865ac1bd8d2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.133.108']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba4e32af-79ba-4ea7-9f03-102d9fe7bce3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.133.98']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f3e6581-cc21-4416-bf82-d1ec094514aa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.134.12']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff3d7803-a236-4073-80f1-82d2ba669a37", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.134.127']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--336be017-0b64-4925-b216-f6169f90a32e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.134.196']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e38b99-3028-4661-8d6d-91dc92add434", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.134.41']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b242056-1948-46cc-b93c-8f4e44ccb01c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.136.44']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de69580e-fed3-4c77-b1f4-7867792fa3fa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.232']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d40fe54e-14d3-4116-af77-637615e7bcdf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.7']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d11919-7a36-4444-bd96-3e9f0d005b98", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.139.181']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae9411c-4cf4-457a-b4a9-c96bb5e9565b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.139.183']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dc951f7-dd85-49f2-b5ae-3fa8be495844", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.102']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dae0618-0e7b-4d1a-b886-d32bb5213150", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.206']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c024506c-b897-469e-89b9-0f423858a203", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.250']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c16749-e6a3-4c71-8c07-09969265eafb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.20']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ab7f5d-3d8d-4ba9-a169-0ad2992d7ae8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.84']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd899fe1-a793-4e32-919c-b0e0b45a5fdc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.143.11']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa9c1b89-e8e0-41ea-b54c-b7879fcd2f32", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.143.51']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75358fd8-12dd-4494-9d6b-495e701704a5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.145.169']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a40bc44-cf7d-48e6-a708-56ba4b10e963", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.145.237']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e381bb-4357-4da5-b3b9-d998bc4194db", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.146.111']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--046de570-32e1-4901-8098-9cce44a98469", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.146.7']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e170f6d6-a238-4108-9f3a-3c8ceb596c50", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.146.94']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fa8f23f-d5d8-48c4-8e8e-60ecc3d0580b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.148.27']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b804a1-b1e0-40cc-979f-da952adb6636", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.126']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--685df6bc-668c-4266-a70a-a263efdba38a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.152.5']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1269bb94-fc87-4858-9bef-4413324f9569", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.152.69']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e491c819-e4e6-4c54-ae0e-cd4b0f407df4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.188']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a488192-943e-407e-9b6a-0c952e99ad03", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.25']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--736b0e11-4f5d-4a09-958b-6e50a275d782", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.154.67']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee58415-5398-4199-b82a-e3c2d1ca6308", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.210']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d970502-7e26-457c-b358-66cb26c88f56", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.58']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5888463f-9494-46c7-872d-4fadc6f98c8c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.156.190']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1279e9c5-7738-4b57-a03a-95b29e4ddd3b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.156.38']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be2a2dc-e2a5-44f6-9270-7f05fff66205", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.157.118']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbdc13a5-eaf4-47dc-9635-1f91551bef5d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.8']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2908f27d-33c0-482d-8596-b8e0b2a7072f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.165.5']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf2ca4f-a607-4e21-aa30-27d8af9b8374", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.138.100.24']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c42588-9516-49f1-b941-894535b0f853", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.138.104.103']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c22f5ec4-cd7f-4859-8b26-466f7b60e24a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.168.94.93']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdea7bd2-b93f-4f5c-82b1-13ceccad52bf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.234.101.12']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca4d6e8e-a7e9-42b8-8eeb-934326f1f6f3", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.242.42.14']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd673e8-cdfd-4cbf-92a2-125f5853e250", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.31.74.23']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--167e40c1-c82f-4582-a984-c1d7348cf0aa", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.55.111']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c4787cb-4487-4e36-b3f8-f111ef8c0767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.39.130.183']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24838d40-e8a3-43ce-95a1-ca511eb3dacc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.55.132.89']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1e6ccf8-e9bd-48a1-8098-38ee57a6f512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.160.80']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbfe4bfb-b37c-4920-8ce0-0e3fd41055dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.190.92']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d7be2e-bc0a-4ce0-aaf8-e71514c92b2d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.211.57']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--744882d3-0400-4428-8fd9-cfb34daac327", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.63.151']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97b080fc-01c9-418e-ac05-c60cef2c6561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.191.32.57']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ebb48d-2b97-4768-afa6-6c77dee3294c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.191.40.50']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75cddd1a-7c46-48bb-8312-790c62a61d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.191.66.84']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e245b8-f0d6-46e7-9b1e-e149eaf4c7b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.206.16.188']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd3d5622-22cb-48e4-869b-221b8b4b06b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.242.25.174']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70102005-5bcd-4f76-a8ba-312fb57534f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.85.243.85']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4bfc9cc-7034-4d90-b4a2-018d8e1c428d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.147.251.242']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d28a5c2-0802-49e9-bb32-e4114f597044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.178.130.101']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5f2918-a427-4ad8-8a70-87848a5a2471", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.178.217.103']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b603b82-7b44-457b-b0af-850846d9eed4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.79']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b566c7ac-3eb8-4004-bc22-2e2861a0d3ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.198.232.100']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20d6911d-5321-4ffb-a5bc-5184ef9a5fb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.98.249.178']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a58c18-0590-4c89-8533-5e786d9de0e6", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.15.52.5']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e5d1bb-ba3a-4074-a4c2-2e3ab58dac85", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.157.128.130']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d362086f-cc87-49ff-9834-b82976fc2347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.172.237.238']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f82db584-940f-4843-80ae-035b8dfd06f4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.175.146.206']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073deeae-2269-472b-9d58-868fe9a8ec56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.177.102.79']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b5860a-7154-4de0-bc9b-66f08b4616ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.63.136.61']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fa4282c-4b46-4500-bf1e-322f0ff78821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.119']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233d7e9e-d93c-4c20-884f-16921a22f556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.88']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041ac922-4724-49d8-b7f5-cc59d32f7675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.33.130']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13377c76-0172-42a3-b5e3-513b2bcb21b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.107']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c14a5152-c1cb-4a7f-be94-5ef818b6bd52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.149']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--704a67d2-d62d-440e-8508-e1d725dfc7b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.63']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d788577c-35b9-4430-9588-977557dde6e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.40.88']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc19245-3150-44ef-9d2b-fe343b3752cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.141']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a39494a8-d05b-4c0e-acc4-591fdcd9fa0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.158']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec88ecb6-f0c0-4412-98ce-64fcb911d97b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.112']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--995e1b82-2d01-4ba9-a14a-6d3404798bea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.47.114']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--961cd5b9-e56b-49cc-858e-d28dec3c9405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.149']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a51599-aae5-4aac-93d5-a512c0d60f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.171']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cadf1d7-87d7-4c9f-a07a-c045ec94ce29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.229']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8033debf-0b13-47ad-9b63-d764454ea019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.235']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e28cf1fc-3e44-4dac-9d0c-9335fa359bec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.246']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79addf3a-3e64-40ec-8f05-4f59e162df85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.185']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e4b08e8-2914-4480-bd71-0125b0b1745e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.59']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1327c5f-ec97-40b4-9492-a5b5e1705a96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.62']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc179392-f4b0-4200-9463-fd99a2d0ae7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.125']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--887e0ed1-2f38-4404-b185-e6d0700a26ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.20']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9e83620-1f13-4b8c-a6eb-5203fa0a302b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.142']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af579f0d-d094-4a2c-8c9e-d1f0e6eaa9e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.15']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de839955-ceff-4b5e-9332-d13d14dab485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.4']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04eaa303-a625-4b81-8882-d96d718c070f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.14']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--930ddc3a-7a35-4bc6-bdd5-c0d36073672f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.209']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40d5f93b-766a-4747-b333-0e7d4ae2665b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.212']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e80046a1-7c9b-4b74-90c0-d8e2f27a3806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.69.67']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4733fc62-9bd1-47d1-8c87-a48a707d3f31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.73.8']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff909a23-1d2a-4623-8182-0510ab35fd82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.233.253']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa3d672-8f6c-4664-8fb1-509365709976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.189']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6547fd1-a135-47ea-8842-fdfec98dd6c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.235.16']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c70899-6d04-46db-8fba-c0777022e295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.249.8']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--315712e7-de91-411d-9457-c5290c435886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.127']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b1bb2d2-11ac-464b-a858-8f747d52060d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.245']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e55b69c5-6493-407b-a0c2-e28acd6184de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.31']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15b1d619-3c6c-4fd5-a8c1-aa6fc4af3285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.144']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691dd3a1-df6c-4ad0-997e-c76694505f58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.145']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22493535-620a-452a-b70a-9ab233eca90a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.17']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3e65de7-aee3-42bd-a8c0-9b7b09b0b10e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.37']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--038e2d48-517e-44cb-84ef-32a21851db6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.58']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f428d8f5-0e36-4b82-9972-15a9a794b3c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.78.123']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5f9d8d-5ada-4bd4-913d-4d13d7d63093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.121.119']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a334f4c1-95b7-4623-aeb8-036024c26eed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.123.188']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--330bdfd6-1be6-4ca7-a579-a192d2c5b932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.233.9.15']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c7cc5ef-9d4e-49a6-8f76-278464372024", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.250.64.130']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c5a3a6b-45b0-4979-beb3-373fa0555d94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.250.64.226']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5116cb06-250e-4a51-97ac-ed01e45faa29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.179']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bbf94a5-414d-4d23-972d-4cf058f72b74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.212']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea15672b-ebbe-42a0-b8e1-5f6779206d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.116']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe849f9c-2baa-4f71-94db-4ae1e0a3ef60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.144']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab3a357e-a934-4eb5-9505-8b2557298d6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.52']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af26cdc-73ee-4389-a8b5-49cfb3e7b257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.109.7']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5778b796-3ef5-4990-b484-4c19e492fc37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.41.137.223']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6eaae97-4899-4d3c-9be0-f4215addea64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.81.0.108']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d348b23b-6cea-43f6-b0a4-0902f6730fe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.156.31.177']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db809e5f-c6ef-4425-a36e-d864b33c7cb0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.18.55.118']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f9aa81-1369-422b-a587-a4513196cdea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.224.65.56']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eddef7e-1857-4147-a6d2-ce58ef0370dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.46.184.6']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c0905de-9fc9-4e00-94c8-5ff1a0682c4a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.124.81']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f4a1cdc-2c2c-4369-aeea-d2c9691f19b9", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.32.130']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea95b67-4dad-4de8-9335-66aa4438ab21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.171.125.139']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--673499b1-d4f3-437c-be29-a58c082febd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.4.74']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c212c6-cee7-4619-8b19-8bee7de7fe84", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.4.79']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe978cd6-f6e5-4e11-a09a-1cb93d93dd57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.40.175.200']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54dd0116-2ae6-4e21-92ea-e0349983044c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.40.19.56']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e22140-01be-41ef-bb9e-a21924477d50", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.61.41.29']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73dd7745-17da-4851-9ded-ec0aea358fe1", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.156.44.55']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1377d563-6083-43e7-86bd-84a972b40831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.13.201.95']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--339c7081-034d-4f1e-8274-6c53d25e37cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.180.182.54']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1509435-9f43-4d92-809d-baa9fa043f2c", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.190.195.101']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af34fbea-5c12-440d-8ad8-f191255e5cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.20.157.109']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f65be1-fa8a-43bb-85fa-288302857de4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.207.211.204']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7643998-7287-43e4-b2fb-dba1db984fd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.233.239.162']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f41f392-37ad-4d4f-a237-df6327789eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.84.212']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa74d10-bf70-4cad-9d03-8c34f76da651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.85.175']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8d703ef-a157-4096-a2f0-2cff1a3ad200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.28.37.167']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c901eb-899d-412c-aaf8-54068a323618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.57.181.108']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff134239-da0b-4156-b411-a81f818dd93c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.120']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d32e89-ecf5-446f-9bd8-b4a33ecc5c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.205.100']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c10aa289-1404-46ad-b6ff-1c73e94cfb00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.81']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05a820bc-a8e3-4353-bd37-52ca2ecd02e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.210.106']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a9ca9d-5f7a-41f0-8fb1-6c2bb3f61eba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.117']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26cbb1e0-d231-4084-892a-a8b9fe97a58b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.20']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee1524c-6fff-44b7-b6cf-809d256619b2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.109.2.211']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--189c5ba6-0d4c-4115-a1a8-2113f647c6bc", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.123.78.185']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff8827bc-1ade-4dda-b70b-966628d3ca8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.198.131.39']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa19f45-b7ad-4f5e-b86c-f0eb0fea2c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.235.248.229']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dcf3d65-5e77-4366-8b51-1e394eb1ccae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.121.189.56']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f9728c-044a-4fd5-b2a5-4f4ac8824d59", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.16.27.190']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--034d9dd4-2934-4359-b5aa-01e38aa421a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.17.22.93']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fe31244-e2d0-4888-b47c-8bcc37661615", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.20.210.182']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dabc844a-6aa2-4e60-bd4e-a5db21424188", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.229.182.63']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f02edca-eeb4-4a4a-9fb6-7a667cb01753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.67.215.93']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f1ea40-e45d-4925-be31-a69a422a78c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '127.0.0.1']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e707c2d3-3d73-44c1-a538-352a9c6e9965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.34.69']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8781c038-5378-4d0a-ad0a-8cf9f8063c77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.226.125']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e61e241-ea44-4160-b4c4-ff8f13128b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.52']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b5ab42-445b-4f82-b5b3-af2d9ea10598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.229.76']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4474b82-1f16-44da-a335-66c28eb516db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.232.254']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ed66c6-acdf-45a6-9ad4-f15f62c38ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.233.253']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--064aabeb-0c0a-4f7c-b2f6-13a6ef3e6247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.120']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--127cd02e-e0c4-4163-87ef-72699a4047d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.38']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--567ef3e1-fdc4-441e-bdb1-34bda22a1ad4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.11.220']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--927f832f-0c00-494f-bc5a-ae6d2e390c36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.201.204']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e2bf425-830f-4189-8e6b-459557483f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.201.254']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e5cf9fb-f56f-47cd-b920-ff1c0a873c82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.215']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a18223b6-7c84-43de-bd05-00ca4a9f5d2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.24.161.35']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e82e9467-5c64-4d0f-8de4-ff57e655d2e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.65.182.200']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--567538a2-bd36-4942-86c2-5d7b50104ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.8.124.68']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c9f9b5-0264-474a-9272-09a8ca1dc42d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.121.88.64']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91fed14c-91be-4654-9aaa-5f11474d9576", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.211.229.121']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f9e6b7-6c94-44a0-8f92-5d7dc2d03bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.212.231.20']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200ed6b6-de6d-4b64-92be-a3bf7a5d8734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.222.45.42']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc8df6c-2cc6-4b9f-a1b9-df93617da443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.232.165.250']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0bee53c-12d5-436a-a13d-5ad0a14c728d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.250.241.209']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0de7b96-0774-4daf-8363-5f820065d961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.59.10.221']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e61de9a-4c76-4411-af9e-f41f85b72aba", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.72.110.24']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a7ecf3-56de-4031-8362-569ac3ad2aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.83.166.224']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d70fcf-2e9b-430f-81fd-be73673abea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.104.46']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9a48665-cfd5-4e98-b332-11173a9dbe28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.105.235']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b01797a-ef46-4425-857f-f7fc42ec5f71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.88.85.242']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--267cc7b8-31c0-4d19-9478-9118811f32a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.214']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c230d8fc-0d0f-40a7-a940-2c2536a19d9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.215']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c55e0c-422a-49a5-b7d4-bc2a556a35db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.220']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3185ddc1-10ba-42d2-8a14-e223eab918a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.223']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d572a07e-e487-4bee-af6e-2e41f22fc2e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.17']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca13cf21-949f-4184-9ca9-8458cc382de9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.253']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b06603-c5ff-4916-8c43-65f5f5e18c9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.27']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f63817b9-5bf5-4bea-a3c5-077e4348b982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.34']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64fd8731-d277-4205-a13e-5424d6c9a16f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.65']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7894e565-d43a-4342-b3ae-965ca8db4232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.161.148']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed2454b2-c4db-473e-931e-cf2baca3a774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.156']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78262a7e-1866-4853-8b95-a60ee0fdc2da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.200.34']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--486a2025-2b22-4747-b617-56a7e59c6375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.65.222']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1fee42-1ce2-4710-bbb0-164c3e6df3f8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.145.183.153']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e50eb5-cba5-4864-a3f2-593c851faf3d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.148.142.226']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08cf0924-777a-4a3e-882c-286d86ecaaed", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.148.155.138']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c66dd5-3234-4a0a-9255-883591e7cba0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.148.26.66']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6defe3eb-6afc-41fe-a62d-7a3731b8a611", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.148.73.100']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1435003e-c7da-43e7-9860-9b94d0f82089", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.196.26.232']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c9da27e-ab5e-4aad-9639-e3124424df18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '133.175.179.150']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b9e96c-4b53-4d5e-9ad4-492333156947", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '133.18.122.63']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c2d9e14-3820-43b2-a21a-d770507bb951", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '133.18.180.27']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--095570a8-c525-467f-acb8-2d127a7ab78c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.105.106']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0c503c-d327-4e80-af51-97273bc4029c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.133.132']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e78286-d48c-4ac4-996b-ba4899a3f444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.208.16']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9744c7fc-f885-4ea8-b74d-9f54863c1d89", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.120.216']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--718c9b58-d0f1-446b-a8b8-5e2879a3543a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.127.206']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed94898-d68f-4906-aaa9-a218f1b29c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.121']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043936c8-c381-463f-b333-ae548a761531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.132']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f5387f-253e-4439-94f6-5372863132cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.78']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d9f3f6-2d1a-4ab5-b94c-5fdd1a5ab99a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.16.173']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4276fc1-008b-4725-b7f0-2f5324b133dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.89.140']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f644f536-39ca-49b1-bc00-1b67965d25c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.89.68']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--159c45fd-ba7d-4014-a351-e30bb4b1232c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.97.71']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816ec771-c12f-453e-af74-b0d1234d14e2", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.148.14.151']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa41c72e-bf3b-4303-8d0b-c8452242335d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.181.4.158']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e7b344-444e-453c-be2a-f7ab3a8967e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.33']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5f9a977-6457-4465-9061-e86187d7ad64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.24']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5df9b031-6db9-4a01-bb80-cf1b88fba8d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.160']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d05431c4-3bcd-40fa-9128-86a6621e762c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.254']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b0af9d9-40cc-457c-90dd-14cc06ecdf09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.6']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43180a80-46cb-41cd-927d-36dc9a99e569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.78']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--217ac2b6-4d67-4ddb-9d22-50aa6c1bdcca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.106']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e77a5f4c-1090-416c-a667-ebbccbba4cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.160']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--274942d8-7aaf-4a0d-8c1e-22da499984b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.177']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a85b606e-5871-4a48-a88b-9252a1b3009d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.122']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--536d46bd-d0e5-43f5-9393-33042a637f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.209']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--590d8bbc-5506-4d6c-b35d-2e576f8ae67d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.230']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dcc94b2-a797-4358-aaf5-df336235a2f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.6']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4521b3-868c-4c25-ac60-6d69fee6b9b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.63']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a792a3a2-c135-4514-a57a-ab6baeb1fff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.116']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfdd74ef-2b28-4f3d-af2a-7d6a5834547c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.94']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe111e76-a419-4700-8e10-706076153c6c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.116.198.170']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccdbe67e-4eec-4379-ad3b-7a60e9ff5f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.234.142.213']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf88832-1ddc-4acf-b4c8-42251c961622", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.104.63']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa4232f8-f39e-4208-a381-086be4028ee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.214.189']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd86919-88c5-4a69-be0e-0a30966ed23e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.227.205']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b2570b-1e3b-40c0-86ac-8b423c9dec86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.231.78']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbfe5712-7f37-4284-9047-3289b998dc7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.36.28']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e50b4bba-3aff-4dce-850f-9d4b749f7bcd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.77.128']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f284265f-25bc-428a-b386-61df1b8cf423", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.124.73.150']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92b36843-9ddb-4c35-bedb-4a7c5021df9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.186.44.196']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c69103f4-ea69-4633-b79a-76287915530c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.79.88']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--927a6e2b-bf11-46a7-967c-130eb8ca0544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.10']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ffd4e8-f471-4845-ae5c-e904e9f595f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.11']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f569b9-da95-4d11-aa2c-0683148f4a2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.12']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9b8288f-0ed5-4064-8195-4565994c156b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.21']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce71e77-1656-44f7-a979-40fefd75d61d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.143.68']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6402f855-ec3e-4344-8c84-16b9ef93e088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.182.214']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc41020-cfdb-459a-ab0b-60f061686603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.255.210']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fd00ff5-a3dc-441d-aea4-a239e6a250aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.65.59']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b99bda-cb23-40fe-b5b8-7288e000dbfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.7.90']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a07ac0c1-c64a-4361-a14b-daea34f3e94c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.235.132']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c2b7df-9227-47df-83a7-750b5f15e035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.72']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360360fe-8d45-43ca-b2df-5509b8bd8659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.98']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a172de97-d5fe-43f0-abaa-ad1faaef286e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.159.213.15']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff30b44-8558-42be-b696-3c7d0276e22f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.66.65']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ebae81b-0d2f-4377-b4d0-4fbd56644551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.70.53']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba6f5f39-1f96-4175-89ca-fc61deacfa76", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.19.117.129']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0957ca49-4a1d-4249-8108-af200c946883", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.19.117.130']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec609a62-2117-46e4-a3f0-e0e3a9231fd3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.19.117.131']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05507aeb-5bc0-45f6-9e06-c50b12b35b49", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.19.117.197']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6663d1-52bf-49f0-8907-26aa903c498f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.212.68.239']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cddf5d1-ca8b-47e1-be85-7aa31f618c82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.226.100.249']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a711974-8591-43e3-8eee-5c564f8173a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.57.104']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2874e55c-da6a-4896-9c03-2820a674ba3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.58.140']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3316b3e-6685-422c-8ec8-eec015630fd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.81.249']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--004abcb6-4ef2-49db-bea4-9bb176a52c07", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.91.107']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda1f679-cd57-46aa-afc5-29110307af74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.1.105.250']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44348827-8d64-4f31-b940-16e35968bebf", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.107.214']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657bcadf-9b48-4a59-b056-6eb5d8f2ac65", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.120.132']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6408980-259e-4263-a940-5db45e9fd3f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.123.166']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf72348-d582-4b6a-992f-a919bf357273", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.151.86']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14481fa3-017f-4733-a66c-aeed08b91a09", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.90.3']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0914f51-22fe-4c75-bb8d-dbae2ea06786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.18.16.165']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd9d95c-2c57-448d-82f5-2a28b894fb21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.183.155.120']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d06795b-0058-4a00-983e-f811e912b505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.192.239.221']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2808a9ca-bcb0-4553-9eff-44e4e5250a0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.207.141.115']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b27c35-c737-4f04-9418-ade64da84733", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.224.227.189']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200d45ee-ace6-4a62-a7c3-b439fc075edd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.143.139.47']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55fbcb22-9650-419f-b086-062aaefc7164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.143.159.80']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--692db512-74b5-4784-b897-c868ebdf2073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.233.190.89']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b57653f-31a8-45bc-a086-abd9f67fbffc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.246.70.45']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--538cab5d-76b2-437c-9ec2-2a078055f613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.105.68.213']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c74632d-c911-43a7-b513-9ad94ab4feae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.224']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d81f5585-5dc4-4184-aced-7f3cd4763aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.41']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e23658-f724-48e3-b766-ff7b6f8fbc51", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.4.15.137']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc75047-8a76-4913-aa4d-178e5f38010c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.4.19.101']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3747b1be-be64-480b-9b84-c8fb2492167a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.4.19.140']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04a0a73b-0793-46c8-b52b-ef3252565459", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.4.26.170']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421d641f-76ae-46b4-bb55-4a488999b5e1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.4.9.16']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daeb7537-5497-4bbd-b5cf-a14438c2320d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.135.160']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d67b8d8b-ac8d-457b-b234-72b9f8060688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.165.141']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--693a6ce2-83ce-49bd-8fd3-e709ed3c728f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.224.178']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1fe561d-20fb-4c4d-a3bb-e7b518599131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.242.216']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--271a2233-6a27-439b-a21a-1f1b2fba2eb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.52.78']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f46716d-bae1-442c-939e-1d1628889724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.238.244']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc5fc1d-700b-4cd6-914c-a161d8ea9128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.100.175']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24442c84-6572-4ee8-9bf0-f8991d4a04d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.122.236']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d1e5945-9ec8-4b3f-8264-b51ebdecff6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.175.106']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8318fd58-76db-4bcc-a264-b7ebe00e604a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.227.75']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca21e840-87e9-4e28-ad5f-e927436e66c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.28.211']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--827c7c9c-0bd1-4def-a844-0c9b1d11cf9c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.50.95']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69c3d2b6-224d-446e-8055-2b6b5eac0bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.63.50']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8aa6118-f67e-4659-a538-5f3f81022d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.9.66']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b2f4c44-3372-435a-93fa-8f5bc68ec023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.132.155']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbbec06d-8a16-4316-a6fa-e41b9fcc86f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.149.167']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe25061-f98c-4372-91af-4221b67f93ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.20']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb475443-4156-4a41-94f8-a7d68e9c9027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.97']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7384fad-39de-4bc6-aecb-88ca77d9b751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.123']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b26cacf8-a6d6-4d9b-8e5b-d943ab0fd84e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.128']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e29080-d23b-4b12-aa08-f5e2928d7543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.185']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c21d38-0607-4d6b-b089-f28c0ca2a502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.189']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09603bd7-35ec-485c-bffc-01e656e62269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.191']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78318679-20da-4160-90ef-a01f02f032b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.213']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f74a1f5-11fe-4f12-bc09-7b096069946c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.34']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38ce67e0-cc41-49e7-a53a-d82b9db94ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.44']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc80f27-4116-40b2-aff0-5f9b39a9da31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.52']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4386066-7ed7-43c6-b7ba-71c9097209b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.53']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6491f1e-eb1e-4fa3-a215-864608c62c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.71']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac2bd11a-1312-420c-a158-93f504d51027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.84']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a318cf3-b4f4-49f0-9bee-c455bc47a18c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.127']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6976e1d3-191e-445b-afac-8d8ffff3d0f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.182']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc74c77f-a9a1-4d60-88ce-5d014c39e42d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.204']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41a15700-c29f-4067-8ccc-12472fafa804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.34']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4982f58-5765-485e-8017-a22877e91f7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.97']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2af2d1a-ffcc-4086-972c-15a7d3fe2fc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.101']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a87a53-271e-435a-9a70-a866450bec53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.60']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db774ebf-e71f-493d-bd39-c8212cba2a0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.76.28']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--823a6ee5-bfe8-416b-9483-71e74472426f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.82.88']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f41a56-561f-4bfd-a43c-62d5b2e34099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.217.74.127']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa6c14fe-0200-4ac7-84ea-e83ca2b63a6e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.31.188.131']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4797da-92db-4382-9a93-2d7e1f2ba329", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.48.8.10']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33b91476-d6d5-4311-8637-a0fdb88c9d20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.6.131.198']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc8f815-05fd-4e6a-a5d4-1d5a3c9e98df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '145.132.102.224']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d067ab2-7042-4245-ae17-4d3337f85924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '145.132.102.99']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e3dd20-6710-4698-95dd-67b75c4bae17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.139.124']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9acb923-dd85-40ab-a364-b02734e03e8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.169.175']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b042240f-a415-443a-97e2-9df3432731d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.243.133']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00d751b0-d17c-4e16-b557-9133b57bdcf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.247.234']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11fb5365-d25f-4b86-b6fd-6a6ca4d4127c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.250.21']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57ccbcba-5cb1-44fc-9fb2-0525f039fd23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.111']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9787810e-36d2-43f5-a9dd-e2ecc58c71d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.141']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb677279-16f2-4ce3-976c-b902b28eebec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.181']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bcac9af-0b1b-4b58-819a-ebae96ba9c1d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.241.123']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c1a2eda-5b83-46d7-9ebe-7c412e2d6903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.139.136.75']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c8552a-e030-406e-ae2c-d2cdcb71995e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.154.58']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c2260a-a1e8-40f8-9be1-3f4a1f040b55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.156.229']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a0fd4bd-a0da-4cf5-a954-ebc682604b03", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.202.59']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf0c0ed-7cb6-476d-af3c-a58f527b9455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.10']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c4487d1-fea0-447f-8737-f165b5277bb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.100']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56eafa81-ed69-49bd-8421-670629dfd5e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.104']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d1b7cf-fb9b-42a2-9540-201e5337b776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.106']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66da6fa1-1913-4839-bdec-fc78b2265db3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.109']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91bcfe29-ad26-4f67-86fd-071fa7a1df0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.112']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a787409c-522a-4aaf-9b10-919685a1517e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.113']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8d5697-31c4-4dc7-8d22-bb5bc172c198", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN activity. Sensors: openclawglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.114']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "sensor:vultrmelbournetest", "protocol:openclaw", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f54025-d26c-4820-b1a5-3e51bc288d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.116']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c2a49ff-09f8-4500-ab6f-3898d5e99134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.118']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db9de3d4-a0f2-4430-bdf4-d3ea022ab2ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.119']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d312f8f-09d3-4a48-ade8-b9e15edb6266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.12']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd90b26-6cde-4242-b52a-050fd65f07ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.120']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--523db3dd-3f9b-4fca-b278-0df83379953a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.122']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a08c7aa5-99d4-4298-b8bd-303ae500db06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.123']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb73e40-72ec-4cc2-a706-dfe82938d20c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.129']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--606d6a6c-3695-4a72-96a1-da4aa7bfca9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.13']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5030c98-07b2-403b-b8cf-72ad7bfcfe48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.130']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b62c35-dfa5-452e-8dcf-9c8a15011bce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.132']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f6859b-f59a-451f-a765-ea22626a390e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.133']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e92d1f8e-cb98-45bf-94f9-7388d548ef4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.136']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7cc1fea-3ed1-431e-8dc2-4a7474602d0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.14']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a27c5ad-4a51-4a22-a4f6-022d62fb73a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.143']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--563273f3-a064-452c-ba9f-f440974fb5ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.145']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe723de-b1f6-4dc8-bc65-4799bb368b0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.15']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b20b41-34ea-4363-996c-70d26017f18d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.151']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8502168-58de-4a14-a172-ead3230adbe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.152']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a55aa48d-92a3-4de1-8474-e086186510f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.153']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760fab68-3047-44f5-8869-f35606df3fd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.154']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28e74f3-3ba7-4159-a167-a6ea15530658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.16']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f718a5ed-a7fa-4605-afba-c28a989ecb3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.160']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--495d6d46-d144-41b6-993d-8cf4427b73b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.163']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c93f1ec0-1d69-4f68-884e-c1fcde36df05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.164']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2b591f8-d0c9-4d84-bf18-981ed0992027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.166']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee761bc4-acb8-4d01-af76-3bc4039f31f3", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.168']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44806004-906b-4d8e-8927-3f86024a08af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.176']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1096b342-6841-44a4-b827-9f9ddd214c70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.178']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf63e2f-5c4c-4e91-92cf-8549b0ec878c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.180']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4114c64d-f7df-457f-a67e-6b8f5cf0bcc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.182']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8408bc5f-8c81-466c-8905-7bf49568f9e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.185']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eb37f28-0120-4b25-86b1-477b999f9672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.187']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c105672-f970-4df9-8d67-0c607712c965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.189']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3147e669-a913-4361-8daa-2bf83182bf1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.191']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b2c1fd-29be-4f7e-8f91-afaf40584ba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.192']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71445d25-5987-49a7-894c-8ff538d9c5da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.194']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--168b726b-623f-478a-beaa-13ca5932f696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.198']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ec10507-de38-45ed-b437-4b984b2c04d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.199']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69314d8a-8301-440c-85fa-473a5d8542c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.200']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c551350e-3fcd-4a2c-8034-c844d4fddd28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.206']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9879d26-3612-4e62-9b2e-b017ad77869a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.207']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7afa7296-d218-458f-95c3-051c3a0f2a6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.208']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ee0871-2e98-47d5-bacf-a73df3460b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.209']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d0566c-e5c4-454c-9758-68ed5053c77d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.213']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b605ed3-f169-4049-b065-1a5e22e09c49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.222']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b38a239-b22c-4015-ab2e-1ad354c49005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.230']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aee3d98-414d-403a-9116-5cba72d68840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.232']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df4735de-66df-4694-8053-2a5473c7849a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.238']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dab40b07-855d-428a-ab24-16209c042959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.24']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d63dcc5c-2e6f-4aa2-a6bf-3b2babd6fd94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.240']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f072aef-a69c-4dfa-a499-dc38fc088d57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.254']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf1ca21d-2413-4339-b338-921ab167600b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.255']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e32e8d-0015-48b1-94bc-b9a418fc7ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.26']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66921763-bc3b-4a84-a367-8d92effdf215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.28']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca099b4-d1da-40e3-a738-0ac1fff3f21e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.30']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9a7b55-c0ac-4edb-9fdf-ecf50135d5a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.36']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c963b226-5d97-46c7-b0b1-1f9644216e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.43']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0517058d-4edc-467b-b9c1-479509f7c9b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.44']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b32279b9-820e-4430-ae19-7f82ef5dbc76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.46']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e80a7a2-6af0-48c1-a021-7ecc07668e46", "name": "Malicious Host", "description": "Observed: OPENCLAW, WEB activity. Sensors: cfglobal, openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.48']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:openclawglobal", "protocol:openclaw", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96c8318-7433-41de-b1bb-fa72beb579fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.50']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f1e6d8b-0239-401a-84aa-6dd70eba0087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.53']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e25854-b28e-43d6-b40a-39f72b3e83ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.54']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30697b4e-714c-4930-8637-fae338ab1268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.57']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef78b62b-63ec-41cf-b6da-527c9a0e3694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.60']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--891c30d4-8de3-4f84-ac21-844511fdaaaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.61']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10057b46-b688-4b40-9a77-e579d70ecdb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.66']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc51c886-8418-4b4a-8845-d9bd134b0b45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.67']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--075717f9-63e6-4233-8bfa-9ff9edf7ed7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.72']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83829ec3-7455-44c0-a5ec-45d7f9d2c261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.74']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffb1f171-e3d9-476b-8a84-2361219b57db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.77']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--181f3797-6c36-404d-897a-48f50bfab947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.78']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a256b70d-1a65-402c-813f-4ac3789447d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.87']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0634065c-358c-44cc-be9d-4fd7cc918b69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.88']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39917706-19de-4e9f-9a36-06f0de883f04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.90']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a857eaf-f4ff-4270-b209-99ff3107f594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.92']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5584cb-79e5-4cb6-8a19-d3fb605b35a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.94']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d04abda5-3244-47ff-a582-98e9ee8fccbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.104']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d26581-5aab-44a6-83f7-00fdf76552ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.108']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a9728ce-e7d1-4ae2-97d4-bb5830e6f9e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.11']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33f97de3-64d2-4080-81f4-3512496a9744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.110']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82850ac4-9615-42b0-8d10-d66a03f9a20f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.112']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a4432d-e065-4a36-b18b-6b80f4a87a0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.117']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8379c529-0662-4d04-86a3-1c06ba386f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.119']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed1686f-f121-4e70-b876-0df57432f4bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.121']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e3b2f7-62c3-42c9-990c-29e434ed2e29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.122']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a69f63ba-4861-4603-8122-a965d57db0df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.126']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6efe05c-6762-434d-96ed-8843631f4262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.129']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0abf104b-fc4d-4ab5-b580-bdd3ad8a260b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.134']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23366bf2-70c5-473f-bd45-239f79ed4794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.139']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c65c69c-5d13-49da-8ed8-56fa99abf6e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.141']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13bf69b3-889b-4427-b934-9d821767b249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.143']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4277a97-6276-4a8a-9ba0-8d5d350e025a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.152']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a9a7d5b-ce93-4328-bbaa-7c579a142d55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.153']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2720cf11-3ac3-47e4-846e-ec110ce817e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.155']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a83eaef-6adc-4f36-ba2e-7fcf24bbf410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.163']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec660564-7c35-4496-9f9c-d276e0872460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.164']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--406a67b3-ab6f-4d6e-8e3d-6139ef691122", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.165']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e20611d-27bd-456e-a122-c745acdb9fbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.172']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c01f13d-abae-40dc-b3ef-d3c466999f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.173']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd358b6-8955-4e1f-9514-ee16c30ce599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.176']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--593ccc7a-ad5d-4270-b71a-e0440a5dfcd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.181']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63771bd8-2ff2-475f-ae8e-82037f31512e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.184']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6270a570-a1f0-4976-9a25-c9c73e3dd1e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.186']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd7ff704-40f9-4a0a-a33c-5bae74f07892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.189']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f28371-2556-4904-9ce6-c7e36bf5c6b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.19']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de0fc727-c11a-40ce-970e-8875c2ee1585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.196']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5448a01-5525-46dc-b29f-5e883e4ed3e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.199']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531feb91-f8ce-4a04-8faf-ff2816b09b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.201']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47cf35d-f04d-4ac8-adca-895e36f8ea36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.211']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--409975f9-3a0e-45f6-a52a-7aeacd2d7f9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.215']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--160f2fbb-7f04-46dd-bd5a-91452ced20fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.224']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d3f3a98-4a1c-401e-b4e0-7f50bd687598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.226']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2c42112-53ea-4808-b8c3-43188997a831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.228']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f78064cc-c1ff-427a-88d6-283df8ec5d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.23']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36d99f7e-1556-414e-b440-4a7b28ae037d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.232']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--349ad314-d693-44eb-8ea1-1f5c73e79bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.235']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee77fb8-9d52-40fb-b34b-8cdee6ec0d3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.237']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad777957-1aad-4263-aec2-56b94e837161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.238']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a4fb3b-271d-4153-ac3e-dd2aa6744cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.239']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06388b1d-bcb6-4385-8fd8-b2bc8881ff95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.240']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f36d9f5b-6886-4294-bf59-00bd6ec9db8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.241']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e0a0db3-28e3-4763-b1b6-ec751c8f4529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.242']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0993f09-3d3a-4a1c-9222-8ab4778d97f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.246']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0661c085-9ee1-4aa0-92a8-9f2e2f4978c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.249']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--206ce2d6-a503-40f8-8771-e9fb5a8e3054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.25']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d180d35b-df30-4977-bca7-922f40b801ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.251']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--401aee4a-166e-4e5a-a933-e0ca266c3833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.252']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b92e76d-f83e-48e6-9516-e20ee3f80802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.253']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f68bc37c-f8b4-40d8-85f9-80f406c43038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.254']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--163fc334-fe04-4f72-ac72-0f1e8b805eb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.27']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c8187c-6245-40e9-a2f3-dea42a21dedb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.31']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--793e3f67-e77f-4964-9d5b-b713b7005cc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.33']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76394b30-ca9b-49ca-be5e-fb83cfdb7335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.40']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b255bef-d4dc-4319-8144-529007b006cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.42']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d659d4f-32c9-4874-8cee-601800a76183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.44']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--755f546c-0302-494c-8394-51cb178d6c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.45']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c5d5fa9-87f8-4f71-a48b-795210a13a74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.46']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--985a94ff-244b-45b6-a5b7-0401ace58241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.48']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90ea91d-001d-4d5f-ace8-a914d2fee4e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.49']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1768505a-e7c5-4f68-b04f-8c98ea037ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.50']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91b1d4b9-dd81-420a-9de2-c9c5389330d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.55']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c947c8d1-f9e4-4b47-9d37-1552e006b92c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.61']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5a49dc2-5192-4abb-9f56-d7416a758e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.65']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48383197-dfa7-4fb0-b4a9-e611ca046ce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.67']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d896f0-e11a-49c4-b107-af48d9e9b816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.68']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18bd825d-5707-4f3f-97fd-619e7bdae568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.72']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e18dfa78-3944-4bf0-8a36-05807a4d2bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.78']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cabed0e-72c7-4ea5-840d-f37af4ecf538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.81']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a793ba9-597c-4a74-88d6-17be2b02385e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.83']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--714b3b08-b437-429f-8113-8b171d148a6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.85']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8af36b-2dc2-488d-a6e8-62a53c59e45b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.86']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c78d3b0-73f0-4770-9ec3-304aa0f568bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.87']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--424f2b6c-9f74-4794-8ee0-366ec014e6d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.9']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--214c9e18-156e-4c56-b5ae-68aaa0329cdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.90']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10276176-6ecb-4cb5-89a8-8e178c21b0b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.94']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b35ff4-cd7e-4a59-a6af-ad3eb58e45d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.95']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01beaf9b-8ffc-4a17-95d6-89c667a9d972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.97']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce41644-bf2e-4d72-a156-c7d251e211cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.99']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f82b0b4-2b91-40a6-b7a1-b96fed4a8f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.224.211.32']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452832f0-fd2c-4bd4-868e-293e8c57ca27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.160.5']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2068e66c-079b-474c-bd97-ca7bf0bf0736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.190.153']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8859c6e-10cf-4cf5-a337-1bba10e1da46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.221.114']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca03433-7ef9-4f75-8433-c9d1a315607e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.246']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0fe46ac-9e57-42f5-8863-24bf0288fdde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.170']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8051b798-5444-4205-9cf7-929e563006d7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.66.142.9']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f48e145c-5009-41b7-8461-dd67c3898d77", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.202.43.61']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--048304a5-aa30-43fe-a9e5-49e68147dfb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.50.107.12']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c22de6-8157-444f-8df2-a2a8ebd923a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.157.135.226']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f124aa0-0128-4896-b5d4-97c3c6cb82c9", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.156.92']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa45de4-a7a7-4ea0-8b6c-c58c3bc5b047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.163.114']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38ffb0b7-cbc7-47ec-a437-69b3790c8f31", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.165.54']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e00e63-4785-4185-883f-82d5380f96aa", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.225.154']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39d424d6-a9cb-425d-8fb3-b6ba5a5a6bb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.105']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--027a3783-9192-42c2-8d31-7f12fdb33b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.186']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2de1ea5d-e145-419b-9baa-a36fa1a6359c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.212']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a6ef58-6d36-4642-92c9-2515b0125afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.214']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d28aad5-ca49-40bc-8b20-99a57e698e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.223']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb743e28-f2af-4632-a759-5d655a56e8b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.236']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a8184d-cb04-4c88-9367-cca4b3894be5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.242']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8318f09-68e5-49d1-aafd-0bc8a0c1dd21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.243']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2746d1b3-f602-44df-a2b1-9decb883b890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.85']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49790930-a2c8-4262-8eac-50bc478bdb22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.102']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e63c36da-fb3e-4588-a5af-fabc6e74a858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.116']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b92f3b-bee3-4923-8cc8-010ba704b10f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.133']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69dca862-0afa-40b4-802e-5468c0c08ad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.146']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5858f9d1-225c-4352-a119-677b3308bb24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.161']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a140c52-b7f6-47e8-85a3-8109300f6c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.168']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf2a705-068d-49e5-b0a8-95518e9fa19c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.174']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9782fd31-2bdc-49b7-9954-9bf80b3c82b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.176']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65741eae-cfc7-4044-9075-7a470148314d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.181']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc662134-52ca-4e8b-b230-15fa1c119851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.197']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc42f32-1457-4775-b9cf-ef07c02bc98d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.198']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e48fc339-bab7-4130-83df-3ba1ca23287b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.207']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66cda7e1-57f9-45f5-8df7-ee20149e8ae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.21']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95469d5a-3415-4eef-a02e-fc203ffbef03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.229']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36fc1ebf-395b-4515-a9d1-dc7bd94a4279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.251']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9933ea3-d237-4936-a563-41b5ec2a3c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.38']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e9e4f50-8252-4134-8dca-bc5e81451863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.67']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d028aad2-d1bc-4fdf-8f6c-cb1ba184f45c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.98']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48882c78-9a9b-447b-8414-2cc565e228a9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.241.77.144']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6068f400-d698-4e8b-8c7f-b7f73fbfa12d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.134.155']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e7bea7-a45d-4fe0-a3a8-5f8372441d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.115.91.20']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e3a82b2-867f-4a7f-80e6-b829241260d4", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.242.63.180']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b30ce3-8745-4e71-8bfd-471f3ec48aaf", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.80.77.244']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec380104-c3bf-4965-9db4-7a0993563d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.228.163.142']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f73c5285-b4f2-433f-a4df-d36ce91e5978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.149']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b30d7d74-967d-4303-85d6-03b0a0c2152b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.204']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d290c705-2acc-4473-af34-072106570bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.129.154']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75901342-5bea-4960-9537-f2917b931c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.130.191']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f8aa981-c2d5-4031-95a9-cff710ef5d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.132.203']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073239c5-b8e3-4267-9fa2-38d10666321a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.132.28']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6b35657-224e-4cf0-b53d-f2992394af70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.133.103']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1504f288-dc5f-4fda-b6e2-6700ef6c9070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.214']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce3509cc-0c65-4bcf-b682-4eb71c39b77f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.48']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd01ed6-ad41-4956-9d32-3dede54280e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.139.9']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5402836-3a21-4154-87b3-9c39b37a9bec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.22']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf9b159-ca18-43b7-a650-8707ac1566c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.39']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96a251b-7792-4c20-aabe-b0840d5ca56d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.199']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5268b0c-2045-4274-847c-18cfa39ee0b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.2']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e06bb7a-bb22-4849-b07d-aaeb07c857ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.217']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9c07d0-3598-4528-9cca-3a9b2c3d6231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.40']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a7d465-4e61-4fce-8a25-1748ef21801b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.86']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64bfda7b-759f-4c54-864e-07fa9e630e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.9']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af1004a2-b949-4570-9fa8-28e337d4043d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.138']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f713f60f-3c1a-4184-86ef-059eaf9dc477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.188']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dbcf81b-981a-4c6a-be0f-d6c1ed876216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.189']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c642c91b-b3c0-48e0-9767-8767cc675710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.146.235']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--306b7e43-aeb9-46f2-bb73-75585f198a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.147.106']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e96ae6a8-13f0-4c1a-a6e4-760b44556aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.140']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b95b4786-ace6-43d3-bae8-c794d8cb0476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.250']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ead4e48-cd57-4251-b8da-8c0111e8f742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.206']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f29763-c846-41cd-93c0-38015f5bbe32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.35']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfafd2b1-3c9d-46f9-b494-60a523d4452f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.117']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeca708e-92bd-4480-9187-9f420c9cc980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.215']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f4b0380-aeb8-411b-bcc2-874a358e2ec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.128']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--350bb3b3-f13a-475a-9e29-6c51876d0b60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.153.228']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8589c42-fba4-4afc-9172-5c06623b88c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.153.53']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c05836-132b-495d-a3a7-89ef3ca4f5ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.117']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a24ee9fa-cc78-4ff2-947f-a77d57f43ab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.138']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7766478-e85c-4f45-9df7-7474229b7bf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.3']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a0538b4-c111-40d8-a92e-fc1c513af707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.219']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeca5ace-5447-4863-9ba0-1a169438f908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.74']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c765967d-9340-489a-af62-dd5ee0b3507d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.177']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85918f48-03b3-4867-b570-2d305b14a857", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.162.42']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2731c0b0-06e7-448a-a3b0-861f0f17e23d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.168.34']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4130e902-413a-4c7a-a5a8-41ea224a6c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.155']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d20aac75-b00e-466a-b11d-93dc01c221e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.170.230']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--026566f2-169d-48dc-a4d3-4d8118f5b049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.171.73']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a0bd27-7a9e-4c1e-a998-b11e0d8f3eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.236']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b58248-1175-46d5-8b7b-036676d509ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.27']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c1abcd8-565c-4ac2-8732-6585d8aa0cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.31']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d3f65d-2015-4050-a58f-dac7a9f03481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.185.141']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d53c4cff-dd94-4c19-923b-b233faf0e12c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.159']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca87d4b-0079-45cb-aa51-2d1ecb42f7a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.73']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f77dc3-cd67-4046-9e09-5e922830bd04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.213']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9299804-0310-46f2-a6ce-13dd2b0986af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.217']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455a4ef0-c521-42ad-8af8-4d5031243985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.247']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44b5cc63-d46d-4d62-95c0-dda575bc714d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.80']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e912f8-6450-4047-929b-f989deba8e91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.151']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e4fe6b-0908-4cf0-8fcc-73d116f23ac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.244']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c6ae40-2f85-4ab7-b027-13b5d23dcecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.250']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a8c110e-1a8a-4f16-93ba-455f0ea50f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.203.18']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a0087a5-5255-4c64-9136-19280993e1a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.184']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e5a0b5-f2c9-407a-9f5f-ef88bd0d48cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.206']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b342ef18-0980-46da-9c11-d3ac418dce81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.7']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b49e1df-eb1a-4d42-8f04-57293f1c75be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.35']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a564de-309c-4d64-af3e-e444db576693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.74']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a683af3-854d-4f8b-b44b-0c3c83bf0838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.179']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98c34c00-06fd-41f0-95be-d65494fe0f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.197']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc636351-f380-433b-aa29-aab80b9203fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.169']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e2ce119-7e97-4884-bd0f-6ce62c5b83fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.224']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--675e11f5-d461-4548-ae69-767df5a371c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.224']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b7cfcb9-163a-4cae-95d7-24d6cd68e1db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.217.179']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a26a20f-fe38-46ea-99f9-1d755a988b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.218.30']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8accde-b990-4abe-83dc-70c21e8bfed1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.220.188']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--affaf42d-861d-490b-ac1c-84e6162db6a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.108']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39365f97-4d90-42b0-9f7e-258f51f13dab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.99']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd42f3c-becc-473e-b46f-1f28c5098f02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.102']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4ed7c99-bdd3-41ff-902c-03cd81a4f92e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.8']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d17e65d-2574-44e6-82e5-4c1acf249d4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.227.23']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--806f35d5-1257-4211-939e-83ddb5b01446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.100']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--863a9954-95b7-4e68-b966-0b28ff038597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.27']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77affb97-71f4-40d4-9750-cb095da065c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.17']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e1a3bfc-940f-4db5-bb20-efdaab013bbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.184']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4899c28-403d-408c-8b23-a8bf948f359b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.39']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aac80527-00a2-4c65-8622-a8aa3930ad7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.97']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6392b8a6-7818-44a0-a104-a12e7e634549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.107']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16997dec-c4a8-4b75-b2d6-85c53837000a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.160']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b65c1bcb-3072-4e03-851c-68119ebc2d28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.227']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53679978-afa9-4030-91c9-aa588d88c3a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.116']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--554b2822-37a3-4527-9e2d-d33d567ca550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.157']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca5bd13-7ee0-4272-8f41-e0052a76bb2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.180']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b05915-6a97-4f0f-8ac0-0dc2e11bf567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.170']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e24a476f-13dc-465d-a14c-f41984701281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.186']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f26e7f53-696a-4a6f-aabc-a8f0f719fe17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.93']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f280ffc6-c2f5-4b05-a288-ef736dff074d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.22']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d29ff5ef-ff78-41a9-af04-f2a250c03274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.54']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0914e4f-3d8e-4e72-9ee3-acf356d6a492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.252.233']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5253cfe1-2666-4471-80cc-78ba62707112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.136.22']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa773582-5ad8-48cb-92d8-6907db0377eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.228.153']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28fd6d0-b0b3-41da-8798-47f3f7d6832e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.240.74']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--503f1c5a-f4c4-42cb-88f0-8a13515d79b1", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.120.90']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f68f718f-1b1c-4d94-a75c-932b1bd6d15b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.191.99']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ea1243-81af-4b01-94f1-26b8c1367491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.22.30']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8616dfcd-b093-4cdc-aa5e-cae33b7a6fa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.3.237']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e2a79d0-047d-4941-bc78-6d24b82f0121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.0.30.137']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de99debd-620f-41de-84a7-ebf3908e8259", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.115.34']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e08716c8-7b16-4c46-919c-04366031cc1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.146.191']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbe891fe-3675-474c-a177-85cacb9a7c0f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.18.197.35']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c080f541-b8aa-4934-a4a2-e6e87945dce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.149']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a30c7711-424f-46fe-9180-ec1e57e25240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.175']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f313de1b-6179-4eb6-917f-6d63d3a05f85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.220']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c65949f-2e3f-484a-a0c2-ab848da2248b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.247']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c738dd2-098f-4257-926d-d6c7751cb349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.41']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--827bcf12-f408-4f3a-83ec-169b8d4d94d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.70']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f08b72d-37ad-42cd-b412-5407997557a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.108']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40cb64cf-ab0c-40a3-bd25-b5ffd2bb56ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.121']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b45c744-4915-439b-9cf8-5699ad374422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.130']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b446c9f-fe10-49c1-ab30-38458fed9158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.148']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a75fb2-f6a4-4cc6-8989-9fc252484e28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.15']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5474f36f-8355-4d2b-852d-ac874a09dbc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.151']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e581c982-2699-4995-9b35-c1888d125e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.164']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fcfd5e8-f106-421f-90a7-22ac582825aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.200']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbad11f4-49c2-4726-8fc4-d1171ac76af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.210']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a66eacd7-e74a-46bb-8c4e-a2f98d772135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.33']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8744215-6731-42d2-bdbd-015906d44d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.36']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a02c0b3-9637-499b-a4bc-557211f58d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.4']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5657dd-e66c-428f-8a22-74edad774ef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.42']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--325c03fa-162f-4d80-bf18-c2ce1f1604d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.54']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7859870a-b0bf-4253-ac3b-e93ada8cfee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.55']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d07d1d2-ec05-42e9-b83a-8aa85f4c84b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.56']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af5d996-8dcd-4728-a292-df1beb28a3d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.60']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21885d38-2e0c-45e0-9919-5e17ade58210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.61']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f11306-4786-40b7-8b8f-3329d7ce12cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.75']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da9fd98e-3359-42ea-bab6-09f5a7ddb3b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.94']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bfa0c92-68be-45a7-b042-1acb514a5a64", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.146.55.228']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b775a3e-be61-466e-8b2a-b41ee269d427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.216.224.199']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb202277-4cbf-416a-85a3-60d38a46cfb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.28.14']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e3e4a7-fbd9-476a-94b7-52be86c4ab1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.233.229.139']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f40586d-b029-4c3f-b88d-be843c83767a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.238.227.43']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41bc6eac-9f75-4655-a1e9-6d165fcd79cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.0.0.10']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e77d3bc-ec8a-4e66-bdd1-56866cec59ee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.15.40.77']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f3d999c-824e-4af6-a96e-705a7701f75c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.63.166']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1133fa6-af6c-44f5-a2f0-91e0d1a49bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.122.4']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd61fc0-b0e4-402d-96ba-7a7dd83364cc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.123.211']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84060fa2-3b5d-4195-b652-d3dd40042c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.138.7']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08eb9725-6dcc-4ddc-8e5b-d1da1afc5962", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.5.145']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973e0fe7-0cac-432e-9bab-76b7b414843d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.11']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4606a380-2454-4cf7-956e-cf9befc4ff9e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.13']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6552ad32-a2b0-4d52-8bfc-24be68442f89", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.192']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff21cdd1-9c1f-4a6b-9a55-c385a9bcfa5f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.194']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7837ae10-af0f-42cb-b144-c51d062885eb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.195']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ed268d-7570-42b5-95b7-74908cc880da", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.197']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e401b7c0-c36f-4e00-8a34-1a04834d57b3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.200']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e871df-9b69-4daa-bd03-d149e44b7ff2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.204']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a59190e9-1f9b-40b1-821f-a9f8586f2dc2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.50']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a20546-40f0-4661-b949-5c2984fa5d08", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.52']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02cac8d1-60d1-4c43-9c52-059f8c52fad2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.53']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe9b08d-7c8c-41a1-82f0-0dedbe982dfb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.54']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f7e29b-76b0-4f27-8559-afc47595d8e7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.57']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8b96c4f-1bb1-43c3-b4ff-86823f59feca", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.61']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6831b107-9990-4527-8889-7413826ed593", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.62']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd23f5c7-5e71-4eea-87f0-b803fe668751", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.63']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c0d3dec-2501-4673-b623-6c0ad2601f63", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.7']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afb3ef87-cd08-4ef1-ab20-eeb35291f002", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.8']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e40f8912-7fc2-4d51-93cb-1577bff0f774", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.9']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4831f9a-439c-497d-b49b-f8ecc11c5a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.178.224.239']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf20f6a-d6dc-4fe1-a74a-c1a2d240c058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.69.200.112']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c78a45-26c2-433f-930d-a9fcae9ae554", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.138.91.204']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10aa14c3-5b59-4d76-9916-e66ef2090f1c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.195.21.168']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--969e2a62-65fc-4205-89a4-2ce480ad8c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.129.209']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--924ace83-3c0a-4b31-a2dd-9239ecaedfb4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.35.6']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--660b92bd-2340-497c-8130-e99fa2cba76b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.41.27']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87f5bc75-24db-4596-878f-2e27980996c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.75.79']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25383e53-9b24-44d9-8ad0-75e4d921c74c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.83.195']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f5191f-c18c-4fc9-8fae-d1a5fce49ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.0.238']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e0aaf1-dfb1-4dfa-8e68-cb81e824d63a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.114.238']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c32f563a-a13a-4bcd-9c38-77ddf59a0e53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.117.173']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92c8d43-e506-49ce-869e-c61acae92511", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.131.239']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a8520a-0c40-4f67-b05a-d9f4c6191233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.151.156']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d12178b-8acf-4c01-a754-f830dfb59863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.4.160']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5493b8f4-93eb-4044-a2c1-2aec49bb5182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.216.50']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd60bc4b-c480-4f8a-8836-c7a928104a51", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.236.173']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb10e82-0daa-439e-a4b7-2fca63e01140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.82.88']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d8c662e-bcd4-455b-917b-5bebb3f57dc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.141.114']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db2299f9-d07b-4ad2-a653-59c827ad3241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.183.215']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db8c0e5-b441-435d-9c3b-3ec082e7ef26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.20.144']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55abc2a7-f235-4d41-920d-a9ae646a35bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.40.163']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c30cc33-f04c-45dc-86ae-148aa7889777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.69.16']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36984360-c839-4277-91a0-d257a3bc1e75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.12']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0efcbba-6797-4fa4-97ba-69035455ae0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.108']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22da6639-a9d4-4641-9f71-aab7762a4fd2", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.176.28.223']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4aa0da-3036-4a8b-aed3-8509586502a1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.10.119']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e5c51bc-4c82-48ee-9d05-aaa76f0b5473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.114.97']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c46464-9f23-4b84-8826-ed4df7cdf960", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.154.167']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7758a3dd-28aa-4034-b744-4c20c1f4ef68", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.180.229']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772575be-7702-4cb8-b325-304ac4011666", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.232.102']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e3f7f2-66f1-4664-9efd-83a0bc7e9233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.79.24']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c11107-02ea-4a75-a1f0-fb3ecbd7f2b1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.14.109.170']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--920e8a14-783f-4342-99ac-9d1d7b6e1b57", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.14.66.219']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98b48820-748d-421f-a14b-9ce052897ea8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.100.159']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf4d958a-e61e-47e5-b368-7e20d78a9989", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.100.227']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98bf9207-ceb3-45a9-bd45-584fe2547e6f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.106.1']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674c9553-eccc-404b-bad2-69f9e90abcf4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.107.40']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f0430cd-fc6c-445b-8cde-cf53315336a2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.111.188']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a43279-a357-4875-bfab-128af8dea84e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.116.225']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b18f29ae-4163-4f72-8282-d2d770e43fdb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.117.12']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b17497e4-e1e1-425e-a9c8-69b6176256bd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.134.246']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f492c53b-f37d-4ecc-a253-45db1782be5a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.145.115']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c3a840-6fb9-443c-b04c-7c25a1a891b3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.197.34']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0800d95-fd93-46a2-8a9d-41ab342df6cc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.204.18']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89b30e96-671d-4ca1-9986-efc55ca95b47", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.213.198']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a996ab9c-eb91-475e-b007-a33cdf97438e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.232.227']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276d67bd-2d50-499a-b68e-59f36059a8cb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.237.58']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f2ccc8-42bc-455e-83b4-cbde4af97282", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.33.243']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d91752e-9960-4f40-a53b-431313425670", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.33.70']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce80f110-a9f5-46d4-be49-ddbff55754c6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.34.123']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f192b27c-42b2-4627-bb98-9eba610023a6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.35.244']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5f000af-a062-4318-8c23-5337979c610a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.35.26']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0321bee2-2de8-4c13-86e4-f45e2b37c43d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.44.238']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e02b5482-fa87-4eb9-80c3-b8e4ae655d85", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.49.148']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a53000e-0dfa-41b2-b012-62d97f13ea1b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.51.122']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c60b7859-d3b0-4f60-91df-b08ca283669e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.53.140']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b5223d-f176-4d40-9d22-689f699f6895", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.59.123']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd68b634-9c6b-442c-840a-13f5ce75502d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.61.114']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb2bb9d7-7db3-4d4d-8a37-ed472732498f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.61.95']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e309f292-2a62-4ccd-ac85-6d7f1594d2ac", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.64.128']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6955ccb9-3523-45f9-bc3e-d408b46e03f9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.66.251']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3954dd4c-cbe4-4220-9c6a-a5d7b8381d39", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.93.143']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8e9dfa5-9a32-4419-8559-175b4c719bc6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.93.233']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41854438-3ac2-4920-999b-f7532587b854", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.214.126.112']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63106bb1-1f3f-4af3-9f4d-be43ac7015ba", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.214.22.158']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed7807f-8082-49c6-91a3-a833b375a366", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.214.22.174']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--162f7590-2136-4dfa-92da-f0b8b0a3089d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.214.6.140']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08e7dc16-6fff-4ca9-acab-c8fc8969fcd7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.214.8.63']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24857bb2-6644-4ac0-ba1e-fb156cbbe755", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.214.9.3']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a9ba04-8cab-4aae-9533-087054a679e0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.214.99.119']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c62f5c7-0feb-413a-9ccf-db31d780fb66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.102']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd6db611-4975-4bd8-aafc-4470a57c947c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.103']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06381732-b5cb-470e-aea6-58008b1f7ce4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.106']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93eb02a1-e39f-4c3b-809b-adaaa9fc2d10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.110']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f5a0dd-909d-46cf-bc79-fa33491e3425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.12']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c8dfe40-6122-4f7b-9502-64684c8fb19a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.121']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2544260e-d552-43a6-baaa-d08a85e86933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.124']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ebbcdc-6172-48b5-916b-01d48d1446cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.134']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adcb6b47-39f5-45fb-897f-2cac222fc562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.136']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc6b46b-2a20-4a00-9a1b-4359351861c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.139']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a55a54c7-8e2a-4821-ba0c-544b9b35c595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.144']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e21eb27-3b20-49bb-b3b6-04059ca53f79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.149']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c44dcda-81b8-41de-85c8-a7c0d81db0a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.151']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4c82f0d-1e38-4e22-a666-d3e77c3978a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.152']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--160edd15-402a-48db-9139-e84d8e721e96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.155']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3422d6b6-e92b-4568-9a70-1069a4e628d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.156']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce2675a0-f4a0-4a4f-817f-5a26f065604e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.159']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7035d896-3df3-4406-a954-466d9a1986e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.160']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79a67a68-6631-4932-90fc-2162b73f173b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.162']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d646fd44-6d94-4edc-b008-e21e9f1d4aa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.167']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b8a3698-0cac-486f-a9d9-2297594653ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.168']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd915320-b889-469f-9bad-2af8bfcbae27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.17']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--932529d7-cfbe-45c8-aac8-33ba106d4193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.170']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e31ec7-95bc-41ee-8fae-8b749efc0dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.18']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc449ce0-60e9-43b5-86fe-32f7f5fcdaec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.181']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe586fe6-fe26-4ad1-a1bb-0ab3da73ef66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.184']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88f624eb-16c0-4c0a-b64f-e513995293ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.192']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b3fa5c-d0a7-4349-9a80-f232dd70c8a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.194']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a486a4-0b4c-476e-a355-c19db3d02bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.195']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8bf1b7e-6161-49b1-a771-31969c80773a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.198']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f64ad76-2cf6-4d2c-9c9f-70d785223f73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.203']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6853ca-77e7-4dc3-8f02-7cf8b860b96e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.207']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9219f411-2381-4a09-8913-510f7b5747de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.208']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac83c53-242b-4896-bd4d-042d0742efc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.21']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e1681d0-f02c-4f09-bbbb-3b4cc5de9c1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.211']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1593ad3-810d-4110-8b76-2d86ebf4d824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.212']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b0af20-852a-487f-95c0-d2b7e7d72107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.213']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c116aa-9f01-4424-bad9-0e6b8468ed49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.214']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c57d0e-77d2-4f9c-87b1-781ee7c5f75f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.218']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--882074cc-2579-440a-9200-6c7794056f14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.219']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b24d43-de7e-4f29-862b-90b40c328432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.228']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcfc64ed-e859-44cb-93f1-dc723bf0f6f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.230']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--609bf924-ee89-4b7f-bca8-2f9af92d4410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.232']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a155ae94-4b12-4ddb-8633-643982ee4780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.233']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ea8bb1d-6f50-481a-bb8c-53bfccf463d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.239']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2953421-82dc-44a2-b390-ef6edc1ca7f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.24']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72503542-9873-47a6-bb4b-a092dc517813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.240']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e18659a-cb6e-4eff-bca7-eadf3c873a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.242']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff645a08-1406-4084-9495-330cca664a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.246']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--befc485d-4161-49c0-bdc5-17c19743b530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.249']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6effed8f-f0f3-4c11-a37c-bf6406017aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.251']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98911831-0b65-4cb4-98c3-dba1440701ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.30']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd540e06-4fab-49e9-b439-b3bdd2674e61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.31']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a12e8dd2-d888-431e-9216-65559a7e784a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.35']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2498d5a-996f-4eb8-b549-19d27e02528a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.37']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd166f85-fdc6-4db4-b47c-b2c100ea103b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.44']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb9ff3a7-7ebb-4ec5-8e44-04de5b5c2115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.45']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af67a87b-7979-425a-ac6d-8df58302e924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.46']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8303c980-449d-4c4e-8a4f-c8604b4ba896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.48']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--908c65b8-f564-4ae8-9958-4e40976eb5bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.52']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--368296f1-05f9-4603-a4b6-7599107a4fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.54']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db8b9e24-56dd-4311-a6e1-8fadd36d4112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.56']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dcae72a-68f7-4161-a384-39dffbe50120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.77']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95000cb1-8c08-42fb-8efd-1ca26cca9b0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.79']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c301d0-7564-4ae1-a113-fbf56fecfdff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.80']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf0ca0a3-e4ff-4f22-886e-287a72b0ca19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.83']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db43f3d3-44ce-4cdf-8a88-d8d32333dcc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.86']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--856b2fe5-23cd-47f5-b317-4ddc7c0d242d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.87']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e2f2f08-9201-438a-be6c-d4136ed34a2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.88']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d11854-49ec-4700-9b77-0714ef9d431f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.89']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0093cadf-d36d-4037-856f-d1175d76098c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.94']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fa9287b-c24c-40c9-afda-b1ee63942667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.96']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--010e375b-1afa-4838-ab28-42666104342b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.99']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4e62fc-a7c0-442c-ab6a-e6b76b9fab62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.104']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab994038-874f-4ee2-96c4-3d6fbc776154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.105']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2dc798e-b28e-48c1-9e99-c0056694252a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.107']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f794bc0-d2af-41d7-b422-b2536e7459a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.108']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b5870a6-e079-409f-b448-01cf147c10c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.110']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b89772-586b-4c63-a30a-2107fad2c649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.117']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c42452a1-6edd-4558-bd8a-c3009dbb07df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.12']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--655221c1-f71e-4859-bec5-0c8d08cdf4cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.120']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ae4c4a3-fc6b-4186-9eac-b075bbd6010a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.121']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe2738c6-aed0-48de-8091-c9a797c89a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.122']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6cda503-2324-40cf-9891-1b5632dddea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.123']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68bc0090-b260-4ea6-b1ad-7cccaaf856f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.127']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f1b3b29-aab8-4194-9d75-095413c880b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.128']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b730cbad-430f-4d63-984a-6f8dafec3698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.130']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b03069-15d1-4e37-b176-ea1421621f7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.131']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b3ab35-f190-4a34-91ee-6338ec9776a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.139']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e3245c-b5f4-42fc-baf0-9b619774f03b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.142']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a9870a-4213-4133-8dd9-520eda22735b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.149']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f460fd96-afac-4b36-817b-9128116aef2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.160']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e76bad73-60fb-410f-a8f3-efe15bb62e26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.166']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bed575a2-6804-4bd1-9f81-0604d024f6cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.172']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd333383-d835-4e71-a3b7-b7607e565cbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.173']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf3b7615-879f-4559-a3ea-b8e0630bca4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.174']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--296e3c9b-d53f-41d8-af0b-e84be0e159bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.18']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5c64ba-3fc8-4dd5-9eb8-b5d448b78b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.180']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46b9bcb2-debb-4ec3-ad1b-20db1975082a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.183']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--002d0fee-9d10-49d4-bbcf-6d2dd6666053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.19']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--623b6d96-971a-4593-ad31-1cd4bcdec758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.202']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b2156e2-b674-4c62-9406-06de65d7b99d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.208']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb56737-bf51-455d-b720-b6394ec9fde2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.210']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad428069-df43-479e-880a-dc2d66c651a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.211']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f091f104-b421-4b94-9514-6f8d4dde95a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.214']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0830ce1d-f773-44f0-b835-9ea557897d85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.215']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d1e987-15bd-4327-85ff-58dd9fddf149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.219']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b45250b-e172-4e68-8da8-93b05a0a9e7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.223']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8ca1fa4-2888-4e2e-b566-e91ae1f3eb44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.225']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51050f0c-9ef8-47ff-b933-f2fc2a0703e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.229']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b08771c2-287f-4881-adfa-6a1c5b3c5d40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.231']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29d955f1-12e1-4e4f-a2dd-0cd9268abf65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.235']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ae6037-b000-4356-8288-bb70cc80758e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.238']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19d5d2a7-7374-4335-91dd-a69cbe1adc05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.242']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a56be7d-111c-4de5-8549-cdb20411b90d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.243']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52519385-8863-4caf-b76b-71facfa2f94c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.249']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3bc9a5f-d62b-4835-b5e9-b42bc1860fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.250']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9079b545-634d-4814-939e-e46542585f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.252']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6482a41-c755-4948-96bf-d6000dfe70d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.29']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e71fcd4d-d307-48c1-a61c-16df7994bf33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.3']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a4dd490-a41f-4eaa-9b07-1887b02832a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.30']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f14420ff-d2a5-42d7-aba2-91381378ca11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.34']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--655ba9b0-8353-4ff9-8849-409095d27356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.36']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef949239-d99c-4317-918c-10f9fd38ea2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.37']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ffe74d9-9107-4068-b36a-b9cc910a34b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.39']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0741491e-7765-401c-811a-7d40f8a00da9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.4']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f64d9e3-a1d0-4332-8881-ff5aec5349e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.42']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc45811b-3eda-4562-a8eb-1eaaf6c38e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.43']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e39c949-be39-4df5-9552-83337bee56d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.46']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e0266c8-916f-4232-ad77-56c9def6153b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.47']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe922418-6aff-4c4a-a062-2d15137330b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.54']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c40be5ac-af24-4cfe-b266-29d33ba2ef8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.56']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041ae0ae-fcf5-4fa3-8fdb-9005ddcc7063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.59']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e40c7e94-3be6-4688-85d4-2dafe13a3114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.61']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85eed6ce-e534-455f-9222-76a12b0254cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.65']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--054dc966-f7f5-4ff8-aa3c-20f94ed03a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.67']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa2d6c2c-78cd-417f-8e41-598538a8ed19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.77']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5a50c4-6183-46de-9dfc-4fd6cb604fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.78']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec16ef8-2b56-4fdb-9c52-4f5e68613304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.82']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0789b55-67ec-4834-b45d-2c61b96bcbbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.83']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d4d153-e076-48a3-88e6-3990f28b277a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.89']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--159d2e7a-a751-45e2-9ec8-fc4608742083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.91']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d21c21-2826-49e7-a567-63ca7af86140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.95']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8699d853-0bf1-41f3-ba07-1b0fd0f7f3ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.97']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1007fb7e-ee76-417b-8731-7503fcdb5096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.113']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--880a714e-987e-44db-a9b6-6bb96e9164fc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.240.172.16']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c539f40-4489-425c-bb6c-f28a3c7a4f4b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.240.179.173']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59760580-32ef-4b3a-aae1-5306a90604d8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.240.211.126']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef61239-b22b-4350-bf27-08fa27590f89", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.240.218.183']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61857f87-22f4-4fea-a13f-c817582d98ec", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.240.44.39']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c865caf6-6e21-4441-aac4-a7d026927c9a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.240.58.185']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b648585-6782-459b-8832-e56bb0e61626", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.240.71.203']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b9625c1-e8bb-4e9d-b3ca-3753a7241ca0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.240.98.126']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6adf45a2-435b-433a-be0c-970d74fa8af6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.128.131']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de83520-adc3-49b2-958f-5a78caf18984", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.128.145']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea226b31-48be-4ab7-b3ec-950a5532b55f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.128.40']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d61e8c5b-7c7b-44f9-aa64-76c9e1d886a7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.129.189']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--095f6b9f-5df3-400a-b4f6-d573136f8ab2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.129.208']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad9924e-ef83-4f03-994b-a0ea3b621707", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.129.246']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e087618-c1eb-4afc-a2c5-192ca6f3c656", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.129.31']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca47389-3bd6-4f91-907b-92e9ba65064d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.132.183']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26795663-3090-4f51-af83-99693a434e0b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.132.202']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bdb9629-024e-4ec1-ae76-661fd8de42e8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.134.156']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--308ede30-2786-4391-ada1-62e29f3b267b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.134.16']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d3b7ac9-3d7f-41df-92ba-4cb85871b8d4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.176.157']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e3c746-417d-4d77-833d-1f1c745bb316", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.176.160']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc7c6df5-44c4-4330-8aa9-0900809494c1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.177.151']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b86281f-52d7-4184-be57-515a817fe7ac", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.177.203']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee66952e-4773-49ce-b807-996c78ebc80b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.177.22']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c75186-2575-4a44-b9db-a961b873b914", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.178.147']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a6acb7-5d1e-4f50-a4ec-202007299592", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.179.21']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399ae5d2-1b50-4dfa-bb0c-37eb4498a825", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.179.229']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328bfea0-5890-4506-8382-0e509b96f78c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.180.117']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab667492-57f7-4043-8958-4c2b49e24110", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.180.128']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece31b0d-8423-47e1-a9a7-6ccec1599d42", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.180.228']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cfa4f83-9bb2-44bc-9c14-5c83379c4e41", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.181.136']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d687f22-801d-4e43-bd9b-27471b7bba6a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.181.42']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b10cf0e4-f393-4e96-a4ae-39a95f8c018d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.182.158']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac5fccc-975e-42b2-9bba-ed9df2b206d0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.183.156']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf51d612-ba5e-449e-b489-90af72a37bbf", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.192.24']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5d6dce-7347-450d-bd2d-f072234dcbcd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.192.77']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8723332-1dce-48bf-ad93-821530aa4339", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.233.159']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59b851d0-5be8-4c3c-a9da-21d3cdddabc0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.235.154']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3800399d-01ab-4c5c-999f-43abbc6def41", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.235.16']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6fe71af-a467-4306-af51-9346bc85c340", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.235.240']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7487fda4-25d1-40e3-a6e0-96b66d000075", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.236.165']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--102b2836-ec91-4d6d-acc9-36bfd6f4ccc6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.237.30']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af62bbd6-886c-4d38-b314-0a6ad35b4f26", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.238.132']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e0a4b39-fc49-42f7-a73d-a9c724af0f29", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.238.183']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--848f1e1f-bcef-47ba-9a41-7c283c042595", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.239.106']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11fe367b-7030-48ce-ae21-4c752d5f92c7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.239.118']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fdd4b83-0d4f-4a83-a96e-3decf7f4f079", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.239.202']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59fb23bd-3b7d-4dc7-8717-ec03aaf06858", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.239.39']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--908060f7-c251-4d05-a62e-7ac3ef3035a9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.33.130']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a9a8f54-c60d-412f-a18b-d01767126cfc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.33.220']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa27d754-70e5-46e5-9f2e-daf046842dcb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.35.234']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c58b2eb2-4d9f-459e-a6c9-e32143cd8458", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.36.208']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--968d371b-121a-431b-8bc5-fb189089e756", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.47.124']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e0a2c2-b119-41b3-8f3d-1ad8a49c26a8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.50.50']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92b46369-b973-4efc-930f-8dc6c86450c7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.51.38']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de00b0c2-ad39-485d-a280-18a8644b4948", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.62.213.165']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffece23a-5de7-45fb-b7b4-a40554800157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.61.91.104']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a9f82ee-56ce-44cc-902d-4817150b544b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.239.129']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc443797-b87d-4bed-b175-17baeae824a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.138.14']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e33882-96ff-4516-add5-105959e6e781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.161.148']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2300fbe6-25d2-4071-b87e-5b71ac598a46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.163.185']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eed9ba5-fb52-4c3f-992b-81ef9f642560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.211.172']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03749973-878a-4bcc-88c3-9aaa869a6137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.201']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d0f54f-907c-43b1-96a8-4b685f48c514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.250']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa829008-e385-4982-9dda-d8f847dc11f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.170']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd0016db-2635-44b1-a1d2-423bcd4874ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.202']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b0a088d-c88b-4ea0-9d49-987b8f81ab7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.206']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec509ebe-86d5-4229-ac2d-6867084ac505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.225']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f6de71-8a87-40a4-ad7d-d2dbc49280b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.247']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--839c3354-4959-4764-9d47-ed299d427985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.48']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff113c23-d22d-4c2a-9eb8-8760f175f846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.13']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--159b440d-a7f2-414f-90cc-aec8f770f7d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.253']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7614a8ad-564a-45d8-a800-282be60e2ba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.151']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eaaeaa6-afe6-47b5-9a8e-5a271d13f53d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.201']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67395574-37cd-47ff-93b5-14c0e85f7467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.220']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bdde706-865e-4520-a5d6-b41fd3791181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.120']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1c25f3-91ea-4da9-9bef-c077e0951cde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.138']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--975168b2-543a-42ba-8248-edffdb9ae3e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.203']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac04910-0652-4ca5-b0e2-8cf6e41c949e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.217']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1367579-3db9-4317-b32c-0f81e5a57c59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.24']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f01e8363-efb7-4b11-8156-2184b419455b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.246']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19bc58e-a95a-401c-864f-88cd47aa8892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.80']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46365a7e-aa3c-446c-b0d3-1503da660677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.119']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f10b5746-9d34-4c4f-90ba-23590f0eb510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.161']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--916a1db6-b1cb-40f3-99b8-c1c0804c1cfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.165']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f66f6f1c-3ca7-4b4e-a812-14f6457c120d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.215']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73eb7d0b-81e2-4f6b-a9a1-c95724ff8ac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.27']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc4d4d7-73d9-42d5-b15d-9772e427ad48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.33']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05eccfe4-a45b-46a5-8dc5-dfeb01927d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.57']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b42b92db-c173-4310-86be-356bd4815502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.176']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04bce200-14ed-4cfb-82ea-c7e1dfaefd2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.207']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f6f6cac-d782-491a-8e72-c1217be04ea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.102']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02620b98-0e60-47f7-83d4-9f01375209fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.126']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df362790-d9fe-4260-b717-409987ad7cad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.175']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b77303-d87d-438b-99ef-00a9dafa0511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.208']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6002b0b-2171-463b-99f7-ffaf15eecd44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.212']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3eeb0c5-bbdb-4594-8db6-3ce71555b40e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.222']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c847c91-1f3a-4d6f-8082-861ffdfee8d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.237']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d963e0d9-756c-4953-a0ad-4ba9bea88ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.239']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abd1ea05-5c05-4354-94d3-c8d1956589af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.254']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7147975-d30c-42c2-8e81-c40bd1038e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.57']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52805b0c-1647-443d-92ec-d10506ead7fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.76']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b17041-6574-4795-933f-c84466ff74d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.10']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a0db42d-5b7e-4aa5-ac89-b819f6e42d3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.110']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--137e5e63-1cb7-4c17-9fa1-16d0fc8828b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.112']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc8a772-2ea0-46ea-8ad1-74dc247a2eb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.113']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0ae595-5d32-42ca-a81e-7a593bf528b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.178']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d2eef31-9662-4271-aa5f-81475e17abb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.207']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--634d7551-a05a-4a28-9e15-c732f98d3e50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.215']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8c8899-ddc0-4373-a4eb-9cde36e7f655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.219']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2363d895-322d-4764-8ee7-7ba5b163a0d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.240']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af6e0f3d-0b39-499b-adaa-bb008104d01d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.29']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--684481b2-539c-4e09-8d97-0d6cf368ac9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.34']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52176d98-e41d-4ded-81a5-1be704eaffb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.44']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9f214ee-7635-46a5-914c-2af798085661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.53']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0005df76-4eee-4c96-87ec-1266ead18605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.24']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37a719ea-153b-4b29-bfc6-60a0e756c374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.111']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a71e5770-e48e-43fc-ae11-3bdfd314896d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.191']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--343ef89d-705e-4ba5-a49a-b4620ebc832f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.200']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f6d71da-3b57-472f-8817-5caeac7dd2aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.204']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--377ef238-d084-4a70-b855-0beded04286d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.224']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ba7433-2779-48ec-a309-1f2a697983e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.232']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d666f02d-4c58-4ff4-a3e5-3db759001f42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.239']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12701b29-c914-4376-9a16-e3ebe7cb6d8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.37']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487e41c2-0014-4c13-9abb-73c88a997389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.47']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c70aba5-00d1-4344-a1b6-ee5a3dd62cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.72']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f2dc20a-8288-4b4d-84ed-ba80589e3a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.97']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--346695a9-4cb7-4bdc-a356-b98700b2d43b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.120']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd965984-fb3c-4a13-8c29-faa335f0b631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.157']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c750e641-657e-4f01-a95f-0b7ff539986b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.196']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--886448f0-0987-40f6-8f65-1404aa1a307f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.204']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b11dd1ca-da84-4d17-b7fe-84ac443ecead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.246']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a35d8b-5d19-4ee7-9776-b8ed0694657d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.71']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25757ac8-5b9f-4909-88cc-d1ddbce574b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.97']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de2ef71a-ee06-41ab-a7bf-75bed27f2476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.108']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c74b97-719b-454f-bd2f-07b2db70424e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.176.251']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e071086b-2834-4279-9c1a-0447a9367282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.10']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c51a8c-88a7-4cc1-8a87-173c9d3f8284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.182']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79cb6dc3-543e-43fd-a3b9-5edbeb181181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.204']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df598309-bed6-4644-ba03-5de8a5083224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.219']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3895a67d-66fe-44c5-abbf-b2d0a3f682f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.6']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b989c28-1607-45a4-b228-6a77a6023efe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.85']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a03270-8b21-4848-9743-2f9db07bdef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.187.159']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd2077a5-b883-415f-bd52-e658b283d324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.180']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea525b80-ff9c-47c1-b03d-6f8a0ca602e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.204']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc064c54-ab52-4ba7-bbbe-f9a4b4bd864d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.210']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3571cbe6-842c-4645-bc66-bc6a13e4545a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.223']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399f12a3-8d52-43e7-a712-f40a2dee5f1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.242']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36380d7f-319b-4735-a1a6-24a24ce96200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.30']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8fc3ba-ae8f-4e8e-824e-d4ed3b869cea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.34']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc37fd6-2b37-400c-bb40-b9af844c561c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.169']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e8423d1-09b2-40a0-ad00-a26def5e359f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.255.63']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88288f4c-7d45-493e-8e3b-aae85133782a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.144']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d6d9c19-a81d-4746-81b5-69a4c02ce354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.93']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0fc0503-8e29-4fd3-8ded-95c9bc0a380c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.102']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7c7e6d5-e0a2-4810-961f-6d28dc0a24d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.105']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4736528c-907b-4396-85d4-3d63c72a2d85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.113']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--141e3e87-eb86-42c2-bbde-bd4263536c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.243']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d2df1dd-0a1a-4f82-9435-efa37b09f76d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.250']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e7d9be-021f-41f7-9f80-eeba0f6c51fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.10']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e4dbc8-8357-4fa1-87b7-031d21e9787a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.205']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ea1918-a279-46e7-81f2-2b56762f21a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.244']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4dd479-a3c4-48be-8a6d-85dd40ffbecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.42']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d45714-f6e0-4195-975e-f145bbd8cb80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.115']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d9a78f-a0a8-48d3-8da1-c0e91b3c79ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.152']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdcbf4d5-269c-4d82-8909-7151c363962b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.182']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c33fcfe-6b0b-436c-839e-e2f6945efe92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.201']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32734d31-782b-4289-8b44-106c51467833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.213']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--823ef1d2-478e-4dad-805b-1ef2030c4c26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.47']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7458dcb7-8c5c-45c3-b55a-894c2799e785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.50']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f91390f-04ca-407d-b2ae-a42683eb9b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.6']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7cc9da7-fd0c-4c2d-8ba1-514084438362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.97']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b48505-21e7-4945-ba14-cb92fe75c9a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.43.179']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e694e122-26cd-4fd2-a462-bc4e80b9e50d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.160']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b103b95-8d84-4a08-b3d6-858fc34a1755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.193']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec4597d-de93-43f6-abb3-56961456a95c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.221']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--468115e7-d6d9-4d88-8d43-bd0f4c8d3181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.243']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bceb1528-3b7c-489c-a71e-57407104994f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.27']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e5ad62-461c-46bc-b333-1e9e25e6a85b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.90']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeed70d8-759b-4037-99e5-9612d2cd7489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.58.251']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--560d08d4-a606-40a5-8872-26c175877821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.6.224']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69976a33-4466-4cc6-9308-49b2261fd1ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.150.172']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--716f897d-29d3-4032-85c7-fdd724f52f69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.183.205']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--febd75d2-cc8f-4c25-a040-4a13e2e6f3dd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.184.88']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3e99cab-2a60-4e95-99b2-a374d70a8405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.211.87']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c482d9-fac6-408c-ba2c-d537a832ca14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.60.26']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4e32148-91ea-4f1e-bd0c-47c630a7df25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.147.215']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c57f2b-cc00-4605-9b2d-468baf31edb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.33.114']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9254ed46-f94c-4cd5-ba7e-a0b42f49fb24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.46.171']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--590d79eb-190f-4a2f-ae55-aff5939ef7b9", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.62.247']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ade6eb0-0ad9-4f8e-965a-69d650882656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.76.92']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--976f14ff-0385-417d-b354-f74c2572cf92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.135.138']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9163ab03-c60f-43e9-b438-b40cb114e4c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.33.216']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e400ad9-fbf6-4f39-a384-e69486947c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.73.79']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e0c348-064e-45f9-85c0-8286f935f55a", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.210.107']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6561fa06-c640-4c2c-830e-6741f29f849b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.228.242']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38fd71d8-590f-4f46-94e9-ff10dad66ba1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.62.33.9']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4916aa5-457b-4b44-aace-f7b30d5b78e2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.62.35.226']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c60a5ffd-c158-4d53-a94f-2d8eb0d18473", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.62.41.26']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c9a1cc-5dba-4c68-afd4-6c0c24460ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.62.41.96']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af4d228-66e7-4070-b3a2-7ec0b10fa252", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.62.89.133']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc410274-08ba-4bab-9e11-5627465feedc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.131.19']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9812e4c6-9a4f-4497-8639-f7aefb7b6830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.22.152']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bafe1b4f-4af9-48e5-aaaa-dfcb642d93a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.47.20']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f28fbf4-9b58-4246-abd2-00597e6aeb21", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.235.74.71']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb1a221-07a0-4308-9ede-3329838c2ae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.60.237.31']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acdcb32f-fbe3-428d-a4ac-2476d4f60287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.16.202']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b03a89d7-cb73-4b97-bfd8-fd2fedf74400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.16.88']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771e3cfe-52e8-4fcb-bf6d-67ad9938caa1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.190.221']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--991d7c72-0e01-4173-b09c-309a29134815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.239.213']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a89b19e-82b3-484c-8526-92f987533661", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.244.19']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b007f931-574d-4ff2-9d3c-16651c2cc49b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.248.205']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c20df6-cd1b-4dea-a51f-1ae3af7187d5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.29.104']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d620f124-8f43-402f-8081-d72c87c04296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.60.10']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e159d38-9864-4cc0-8f87-6dcfd8b1c830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.78.68']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e94884-d2cd-41ad-9268-6f671b81b7ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.9.137']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d7f402-1eff-4abe-92a0-d83e4126267f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.86.66.42']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5a07b6f-203f-48f8-8f73-515ff54645c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.167.210']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53994d64-5b34-4978-b69b-10f2e220e056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.16']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a52071-4176-4d81-a572-d993975739ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.17']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1489a729-95a5-433d-8a0f-ee43343a68be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.18']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1d7152-6ef2-4e1b-a2f4-6d91bf4dfefe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.19']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28229780-6329-42fd-879c-cd1152107d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.20']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fbbd3e5-207d-4a3d-8a6e-82dfe066447c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.21']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed65e716-8b97-4bd0-91dc-ed96445028b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.22']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd85456-6491-4060-bcb1-427ba09ce903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.23']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc9d6fb-88e1-4a3b-b04e-736cd34f952e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.24']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--392b2ff3-7d59-4233-8879-3c442873eedb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.25']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d555553-a610-4b56-80b4-b3d7bc614f82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.26']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a61b1b3-a50a-4228-afd7-1f0d7c24e79a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.27']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afbe5aae-35c9-4fb0-992a-5cb7f7a421b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.28']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50ce46eb-8277-44e9-ad3e-e963f69eab78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.29']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c47e122-26d5-4a35-8444-7ed8bd328b77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.30']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6abe4f-3fea-493a-a1ed-7bdbd4c23fdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.31']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ed383e-0339-49d5-80f9-1994956cca64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.52']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421e742a-7232-4ff6-8036-b3e880ef30cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.54']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcec21f7-8b80-4e0f-82c2-9f7e999dac61", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.56']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21328ba0-b288-4bc9-b645-8476fd1b00da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.57']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b9e866-4240-4b61-82cb-956b637c7a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.65']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba842b07-430d-458d-a02d-d0c5251e4a77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.66']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a186d531-9654-46cd-9626-70e2a835650d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.69']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--decece20-9466-4e75-9ef7-9b137838d491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.71']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c5fd7d6-23cd-4eec-9282-45df030826e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.77']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4848e35a-9a0b-4270-99ab-e5b834c129f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.78']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0324ed7-6664-415a-9cf3-ce01aa1b6a24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.137.42']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a985f4-5c97-4aea-8641-ced6b9d710de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.225.143']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0155ad96-b049-4ab6-b2fe-af3abf631215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.234.27']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcaa4913-c123-433b-8946-ff36756b76ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.245.215']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab654de-cb62-4854-86ae-68976dfbb026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.51.98']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e53c914-784e-4b32-82b9-52355f36d595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.56.159']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a2bdc27-a02b-4342-84ad-51ec349195d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.6.100']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943136f3-8f34-4d74-91e5-096f3298e04a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.195.99']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--615757db-5670-4e23-b8f0-02502461e770", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.138.213.115']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dfc44f7-c599-487f-aa35-3c5199c28855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.112.236']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59215fbd-a797-4f4a-9b3c-e1c6e3a84d4d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.115.96']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0340e928-0c7f-4ad2-8236-da6502132bbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.122.230']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2d61517-3133-4a61-9e06-0e6deb47c724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.127.154']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df7fe555-bc53-46ca-b7fa-c95c20e96865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.18.193']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09da859-975b-45b0-8688-615cc9598b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.228.194.242']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b586e7c8-61ca-41cb-94d3-65b5b6f15a7c", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.228.64.127']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b290dd-c606-4ed6-ad2d-9edd754a761c", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.197.113.175']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3a56eba-b34e-4f04-ab86-4ff3af9785c4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.163.48']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4b8f970-6f2d-4a92-bbc6-5c7b404f7375", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.35.153']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4eaeeb0-4ea2-41fe-a039-38efc38ff78f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.155.12.26']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5603241-747c-4f4f-845e-c411ad126535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.147.158']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d79b5c7-0aee-4c54-87fd-3854d8c33407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.117']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a45d345-6aa8-400c-b050-181d7f8df284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.133']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--191e0cba-89f5-4dae-bde4-0156d75706c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.130']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d90290-88cf-4b02-a8c0-16ae096379bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.134']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e51ea3-5d14-4fe3-b19e-667fe74d03d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.139']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f53081e-b2d9-4aa4-9210-54f54faf1886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.218']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--008553e5-506e-482a-a509-cbc30d6d0a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.219']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81254dd2-7140-491f-b092-ba2f0fe2c876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.242']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cca97a6-75e4-4211-9f58-f4ba45cab0ff", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.238.62.185']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6dbca37-c9b8-4906-8894-7a002cfcd8d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.130.197']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df4939c-5ebc-44b2-9056-da546f649a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.160.189']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--736da479-71bf-412e-860e-9152956a1f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.9.16.186']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9894f52-b6ee-4ab8-b5c6-56bf53f1996f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.113.206.43']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0622c2ce-6bb4-4b8b-9013-9e1b4f1a5970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.226.112']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0f01395-3ac3-4608-aede-0115c83abcf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.227.51']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--592dc5d5-08c0-4b33-b515-cbb3071674a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.228.135']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08075aae-e403-4eab-973d-7a0602bfe0b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.120.25.139']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf9adf64-f71a-469e-a143-68542fe2ea95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.211.125.105']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d05d02e-ebbe-4ed4-b62b-c9976eb28bd4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.183.42']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07843e30-be8c-4b9b-a4d0-44f6f1e59f0f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.189.45']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9c941e-b036-4759-99b8-4f107a7bef07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.19.160']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8442082-6818-4261-af8e-d2c5aa88c584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.93.159']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c841724e-e436-4cac-8073-3b9a937024de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.168.152']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbef7cd6-7106-4e35-8493-5deed9870301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.218.179']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f1afcee-cccf-4aea-adcb-4e38a3522184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.50.193']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf3d7c38-6b15-4be8-8432-3886edf7332a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.219.251']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c13d27-97cd-42ad-8a8e-acb1f6ee09a1", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.147']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bff7cdf-89d6-4577-996a-aa1728f7aa27", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.185']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c97f18-7ef5-4af5-ba93-4db5d260a849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.195']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--345ae114-c4aa-4773-9faa-767e0803ca8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.182.212.51']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--677f06fa-6ce7-4487-af68-f4f970fae05f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.183.139.72']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fc83cdf-bd65-4199-ab24-e7d407b60bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.183.89.64']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d89c019f-d3fe-471a-9334-e4b02b25c91a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.190.126.113']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc7d92d-b10d-4615-ae1f-d7e78663b534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.16']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944e5c6a-326f-4706-87c0-a0590c4a163c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.19']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b849601-0b17-4843-a541-6a109d393537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.21']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c02b5393-da2c-41fc-bd13-0e0861e73e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.22']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2dded52-2978-4777-b1f0-3c27cbe3f42a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.69']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6778ae83-f5f7-4a21-bf8b-810e375b3297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.122.207']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb49f79-9f02-4bd7-9253-d1897ef58095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.50.78']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--412bb345-f939-4782-b60c-82e9e355fa6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.156']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53528acf-aed6-45b3-ab72-68b25d995e7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.49']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f523f7cc-0446-44f6-85e0-604535f847e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.251.111']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb2feac5-b5df-41ef-95e2-f9f94ac248e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.49.78']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f48ae9-b15f-4db1-8f1e-00fe94d71d79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.65.126']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5afa4177-8cb1-4b33-848e-18673763f185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.0.102']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--652260da-04d2-4a39-9ec9-4e197942e7cc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.53.195']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc176dc6-b86a-4bb8-a011-6889f1193988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.9.131']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4db22c1-ff96-403c-8f9d-b39faed88f1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.163.226']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--428fe4d4-f1d7-4bb4-b309-6169e0ff4c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.215.144.32']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86930534-1e65-45d6-b064-04d8643dcafb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.215.145.207']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01aa9f21-7c5b-46f5-b4fd-0150473df729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.215.212.100']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6c1cb27-d5e1-413c-84e2-c3f5a5ee034f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.215.223.210']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa761ff5-df7a-4464-947a-a3d5118de18f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.108.36']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--107e6cdf-9454-487d-bbb6-18c9f4531e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.15.250']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fe6292c-47ef-41ce-a115-94f132440374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.27.232']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86729896-a26e-4e45-a2dd-b8b72a3d092f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.3.17']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86afe67f-f4c8-4c8e-a7ac-0b506d52ee5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.8.247']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--954b67e7-0de1-46d1-8989-40e3ff416d72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.219.44']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2997cd40-5fae-4ce3-ac57-1b441400f1e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.221.115']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec5458b-bc81-4518-99cc-38d4266f450e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.12']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fbc9a99-e106-46ef-aa94-c62509dae101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.95']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61796aa1-be1d-48a0-98aa-eb54d81d30c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.190']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e252233-24f0-41d5-99d2-be40cf7b2cb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.75']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b73c47f0-ba35-4e8c-b84b-8c98c2d25dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.8']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--025a6ec6-0fe2-4ae3-ba68-06e01e3dc98d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.93']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0537e403-01e1-446f-9768-05505f950d22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.21.101']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9ab7d9-0666-4890-8ed3-c070a4d65088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.217.192']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9334009c-2969-4ef5-bb8c-0e9b8777bdff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.210']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00bbf5f3-e560-4efb-b68b-afdae5da75dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.22']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1aa50fb-c215-47fc-b8f5-9fb9e5c19638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.245']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f7b34c-365b-4da2-b601-851d1c1b5aa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.34']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee700bb-ba56-4abc-8959-9fd9f7fa263f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.87']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b46df3b-b341-4145-8ad2-b22393f46409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.221.84']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a036d22-6d8c-4235-976c-d42c230849e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.150']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac37376-57b9-493f-82ef-f8e9d24cb7d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.187']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0cec21e-6bf7-42a2-8ac7-4494339cbc0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.243']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68085305-4e3c-4097-bfd1-74326ced42e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.61']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bafaae23-7947-470a-a631-4b9b4cd70d56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.106.113']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ccfd5ee-07be-4dc8-8c9c-045ad2732fd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.128']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8ca55ad-d6b8-4cbd-937f-83188ad13179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.197']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e81f8f5-f4f0-4942-8d3d-441206c1ce43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.98']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb3aa23-8224-443e-8b58-dada1898ae38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.117.243']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1bd3c7b-186c-4ea0-8772-c5b1a9d3dc47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.123.208']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c43266-a558-44d2-a454-30d8e38f7ac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.127']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5de53cc4-25b5-429c-beb7-a46992765b87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.175']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d0fe2cc-46dd-4c7d-ae20-1e62feff5c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.111']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6085e48-5aa5-4d8a-abe8-abcc3c056503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.208']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--532dc3fe-6974-4b26-9643-d897af7f66ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.245']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c633575-c067-4e11-a032-2648a4632232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.130']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--369e36b6-6509-4c25-b29a-37a4e61829d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.75']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6441f32b-70c7-4179-96ea-7aff966962a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.213']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c789285d-4ece-47d0-b1d2-9e273df0d4bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.85']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--155123b5-8b7e-454c-ade8-a38bf7338073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.127']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae3a542-d55e-4354-a727-04d126876b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.22']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d9d4b3f-cbff-4f7a-9548-dcdbccfbc0f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.240']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56f396fb-1355-402e-adf5-96f81f5ef25c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.29']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a39535e-dbde-4d82-9d81-a1c54f1070c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.201']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba36f6fc-24ef-4349-8d4b-6d88dd3ff883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.206']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac651849-962c-40bf-8faa-e7aeddf585fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.160.104']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41d3886-e3d0-4131-b5cc-f4e75eed97ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.171.10']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27beeabb-5910-4b6e-880c-dfac8a91626b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.188.122']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--623a289d-939b-41bd-9d60-881555583d50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.15.240']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d0d56ac-1a15-4e5c-ae62-f1e8b199bfed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.109']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a33897ed-8b6a-42e9-81e7-bd3fe9defb12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.96']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0301f650-f2d0-4aab-b9f8-d6756eb8c640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.62.109']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b60d3d90-984c-4d40-a48e-60644cb83388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.71.239']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c9459d5-5e48-4dc7-b252-dd4651948fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.71.245']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--014a3ebe-c382-41e5-8bd2-e5cd131017aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.120']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f351f1-6786-41bb-b878-c7a30ad46beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.30']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a49e996e-80c8-490a-b535-433f070e3589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.31']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6cc8e49-a3b4-474c-b2b5-dff25ff83b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.32']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1aad659-1620-41c5-a8ed-0cb002bdb32c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.34']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68385952-e3c4-4a88-bfc3-b9c5c34780a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.63']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf48732c-e7fb-4655-be32-c2b3598a8d41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.64']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c8e1ee8-72a8-40e2-99b2-a774352b1d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.65']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452c0216-e2a0-4f50-91d2-b464ae75dff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.66']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b69d63-3ff5-490c-8814-3ee1b53edb57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.70']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ce1e2c-9033-4a9b-b2f1-571a9178130e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.71']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94fcad04-13a1-4b85-8f9f-b746bb7b62a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.73']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd9b7aa8-7fe5-43d4-aeec-a15bebd363e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.74']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e33e47a5-e892-4a10-b42a-61b1da8dcf83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.75']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b9d2797-a2b1-4c3a-a21b-1773cecb5304", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.197.14.231']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c1e0ac8-2a38-4833-92bc-c69515d0cbff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.117.55']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d34cef-a343-49e6-a6cf-a5e52e327f48", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.217.131']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a70912-2640-4f7d-b48a-8ba7d1fee83e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.150.73']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f15709-dce9-41bd-9192-a3389f25e0bd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.244.60.241']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d76fc47-636b-4d10-9913-0f056101b87e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.249.42.94']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a35de694-7574-4272-9a4e-54c9bd797f0e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.254.234.162']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af1a780b-dd45-4eb5-aeb8-65f6af660a95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.210.89']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f78536-0909-4eaf-9a38-d518f4c239fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.212.137']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e5b712-fbe4-4c6c-b5b0-495c999e8afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.22']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--785c272d-515f-47db-b25a-5c9018943bae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.103']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--974abc74-3a61-4357-9a08-6c828b778a45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.115']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ed32f7-c505-4ea8-a411-b850dc3bf4b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.124']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--631af33c-bbda-4aab-8dac-3c41a130d555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.143']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d18e7f-1416-4505-ab12-a0083fbae091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.149']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ee0546-0a5f-431b-861f-00412b67754f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.32']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5fbc66a-4678-4d45-bf70-9824f67795bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.49']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb44c031-d069-41b7-a64b-df41e92b7aff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.62']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e9e4e5-afde-4c46-ac62-5d7f715cd451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.73']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbcc9ff1-1f2c-4767-b809-54ecc90fcab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.89']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--881e5013-f806-4b9a-bc69-f024a0a4c781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.242.196']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81119cb1-e4cf-4585-84d3-5b0ddcddcc42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.243.63']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2397b865-94f0-48c7-a1bb-79c02cb0e045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.32.218']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbeaa1a5-8b40-42d4-b9fc-f0b72ef15be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.4.21']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c11ae0f5-9ba8-45cc-934e-106927c3847c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.68.156']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c260fac6-afec-4585-9917-08cd6ee98bd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.71.134']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--733a7fd2-4ba1-4415-86f6-8766f97198eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.87.36']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff16e01-6a79-49ac-a117-4da22e30a336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.7.32.199']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0289399-f62b-4f1a-ad70-e5df70c326b7", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.0.195.225']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99284915-962c-4c93-b94c-21efec9f36d3", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.101.145.136']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be826b58-26c9-494c-93c0-b76a4c7f1275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.3.145']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8681e74c-d79b-451c-8d89-05641a44a0ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.13.3.51']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a4b66e-d989-498f-9d7b-40dca6e58d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.157.31.83']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2fb7c3f-1ced-47e3-b514-1498033fa074", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.178.110.121']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200871d7-56dd-4386-a2ca-dc9e1d33614b", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.212.12.133']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57751a5f-fd99-458a-adbe-25993fecf9cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.118.217.106']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82432440-af30-4ea0-9957-b34e0316307e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.123.2.115']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a04267b8-74c9-422b-9fe2-b7e244231b14", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.192.40.102']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a89ee2-8018-4831-9fbc-2b15f6462a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.193.16']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d81d58e-a166-4a42-a349-ade05982c9f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.62.81.238']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9fac8a-a451-40bf-b068-c059f544b2b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.131.147']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c4ba52a-1680-4303-aacb-77f528733ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.131.215']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0cea5e0-abe8-43f3-8104-d7c89fe928b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.171']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42cba90a-5b7b-4f77-9601-26f634de9275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.20']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ed912d-0951-483f-8f5c-23e9fd8236d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.136.31']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cab95df-1ed4-4eda-8870-54ebe2e98177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.103']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe5c1b1-36d2-477c-9a22-50c98e9f3d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.11']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae8ed87-dab1-4ac8-ab23-ec91dfa55e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.128']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26411119-0500-4455-9fa6-78565cde54f8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.130']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b7615b-87a5-494e-8b43-bc8b871401e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.140']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d3d333-9522-4a35-b08c-81d04afafc93", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.151']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f65a8daf-3f3f-4cf2-87ac-34d98ec6b015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.169']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f87b5485-f3e8-42b6-9274-a9828604c151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.214']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc7a63ae-d5fe-42e5-8059-f548860d8973", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.229']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69c667a2-ac59-40ec-866f-e2f9e11f2137", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.236']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9839698b-80ad-46c9-812a-4862ddae8c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.254']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ad4409d-afee-4356-9be7-e3e79da8e32f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.31']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bcf8ca0-8f19-49b4-9e3c-e4ca01df2d39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.43']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17424fde-e582-4816-92be-c3d498573a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.54']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3505f61b-b1bd-44a6-867c-06cd19aad356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.66']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b77a1ed-655b-4a3b-8e48-1ed0222038c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.87']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5189fd26-0b99-4b99-9243-53f1f9e43dea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.120']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f0f79c-fa5b-4ba7-a0ba-99da30c8c715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.132']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b458f8ed-360b-4bd1-a27b-850e7a5e365b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.147']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e3d416-d2f6-4725-8b49-cae170e0a30f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.176']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11627521-3ab7-408e-805d-6978710e2423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.183']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76392fc9-5aca-4592-943f-af77be4aa88a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.189']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de64e503-7e27-4bd5-bce1-84424372784e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.197']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d76920-3658-4d78-a1a9-68604552f588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.2']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e0d55f-1946-4f2f-890f-9abb49024a58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.201']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d95c2f5-59ee-4692-a19e-29194f926da0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.216']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d448b83f-5fc9-4174-908c-c5df91263349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.250']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b776b8ad-5b35-4f9f-b49b-419cf789188a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.29']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e1e896-5898-4b0d-b719-8eb14128e23f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.38']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c99dea8-2c38-4bda-8cf6-e0723dec6d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.4']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cae1df6-dc59-4717-8982-c14922ee9475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.96']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7261da98-9b52-4d43-b5a3-ddc478ba3fc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.180']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c1b9e07-b785-43b0-96bb-15b972fae93f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.182']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c3724f4-6454-4409-81bd-e45bfb3556c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.194']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f69dbf0c-e655-46ba-bce9-b70224779d72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.201']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--996ce9df-aa85-4306-9cea-3ec39c88f5b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.45']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdaef4bf-2ae5-4622-8eff-ebaca8c9b07a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.152.143.101']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1432fc93-62aa-462f-ba42-30c0843c20b9", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.184.114.205']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--296b395a-11ff-456f-88bd-8d4fa50be612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.185.93.67']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8249ee1-7f7b-4c57-8572-e4321b3bb887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.38.194.235']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--659290bf-0734-483e-ad0a-8c3c3d9869ef", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.85.247.230']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31b40d89-c973-4ed7-ab55-59d99fdf9eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.86.50.8']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74ba8189-c56e-4a7d-a304-55067b552589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.105.107.112']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebcca944-276e-41a7-9790-619e00c29bc4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.118.6']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb5513a2-b863-439f-8da7-eea09ae8dcc7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.51.84']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c34fd9-5b1a-47c0-a382-1d0b51c760c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.95.222']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f556495-347c-452a-ad62-4455ffd43f2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.53.230']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68bb166e-2c35-47d7-9ba6-35de2af6c827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.55.153']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cd52584-c955-4060-a1ee-1a608e394471", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.162.252.121']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47080c6d-cd73-4c16-bd95-12e06cb1d98a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.151']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2db3239b-90fb-4e94-9df0-510b8bf7a1ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.152']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057208a7-9869-422e-a14a-4aa3d6423741", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.214.77.71']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db07760-6f8e-4151-8d8b-66b37431ff33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.55.235']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e7fa56e-8c76-4bc5-b7bc-ab1a645a1e2b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.184.242.48']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4175d518-332c-48ab-92b5-f432e77d32af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.146.227']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa809fd0-d1d9-49a8-8253-29d37ac4e4f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.150.26']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5edefddd-d00f-4734-b269-49100ef7fd29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.163.26']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bcf2edf-9e82-4919-a61c-9026ba4c8eae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.51.153.0']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a6ff8e1-724c-46e9-9b6b-e169e0debfed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.137.26']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e720ac-80a9-4250-921e-a505304d0cb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.232.245']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b749163-fd87-4a52-9b6e-bc82a369f6fc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.62.216.38']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5db9e6d-03ac-4541-8e14-25aabe9fd3d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.116.118.120']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c504da-bd41-4f48-846e-69d1cf6c49a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.117.151.15']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a224928a-4942-4d35-a56c-afd2d7c22397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.119.209.50']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e189312c-d8b6-46c9-8cb3-248596cbbacb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.133.199.181']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c42256-0d1e-4e8b-80d7-1457f6e603bd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.188.164.121']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ad64d3-de9e-439f-b3f6-e69c58711622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.188.77.212']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb82420-6721-4a24-b97a-0e84e0b97234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.189.43.56']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b711adda-06ae-42ed-b1e1-58f6d9413a50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.189.74.1']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f2edbd-62bf-49a7-a907-9c7061659adc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.190.15.50']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f157d077-ed40-4aff-9a6b-789864ebd01f", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.216.184.237']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57cc88c5-c4e2-4f07-a50e-d98930cc418b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.217.208.51']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b609a63-2566-44dc-b860-1bd343c0fa52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.221.179.104']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--473c9aa8-8de0-43ea-8077-7e6a3ae7a1be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.158.88.170']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3cb653e-2bb1-4fd7-9671-c8ef02b87635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.202']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27462914-debe-4f85-9210-4b8891ea0b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.203']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b573f4d-2a42-4fe4-8298-f57852f9fec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.190.5.46']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa2a4da-f4ab-4951-9bb8-22a1e5d130e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.242.90.136']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38dd25c4-23e6-48aa-a4c1-78b7d341982b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.172.156']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--663050ce-6a9b-4879-8214-8e591c208c5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.93.3.33']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa2c6b7-6417-4329-8d10-30896fd70a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.95.238.209']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c839fc2-9472-4507-9889-517489bb57bf", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.115.171.104']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bbdcb49-539e-4e31-a9e8-2ea51400048c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.173.241']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4410a8da-9dbd-4eb1-91bf-30ba7f61d918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.215.60.59']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed3f9405-a6ed-4f5b-8b41-3d13255d89fd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.23.33.112']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a59f21-a504-43ad-9739-97de8c8622ed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.45.190.22']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa712e09-8fbc-43bd-a0be-ff19caba7a8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.113.35.40']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d20d17-bd13-4749-8254-f8d0fe7da0e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.119.225.45']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72734cbc-d3d3-483d-9fcb-553f3b9afe2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.119.226.24']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--180511e8-e5be-43b1-b9f7-43ccee443712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.119.227.66']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cde4a64-1ce8-4a33-800a-49c1ffa40d53", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.151.52.134']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e0c9fe-fbca-4781-bca0-6a47335ea4fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.16.3.122']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62053871-a5d1-484b-9546-63a677c5cd99", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.160.155.236']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a654657-f308-4879-8970-084465f341c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.239.112.67']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f9e5eca-fe95-400b-9761-0f61677322ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.169.13']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--578a53eb-a28b-41d9-98a6-8e97f69a0192", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.253.156.173']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--013d836d-b9d8-410d-86e4-e96489306dcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.34.191.186']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bfac568-f3a1-453d-be1b-5c3c8e54d163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.37.87.18']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f747866-179f-4946-850d-894c948c6b6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.42.93.139']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6423b42c-6c8a-4753-9f1a-4cb2f31ab96d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.79.13.2']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f33ed13-dbb1-420e-b085-4212bc01f99d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.9.2.124']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0efef3ad-534f-44b9-af04-f0a5641241a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.99.192.170']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f617e2b-07a6-45ae-be37-ef899db8a0ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.132.88.178']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043a88ee-8e14-492c-97e3-bb1e080d78a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.134.217.20']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e40b2a-a217-4f0f-81cc-be312c2a6bfe", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.166.94.133']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2b59039-36c7-4717-a3b6-e149e304d17d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.191.124.211']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ef9d7c-e01c-4023-8608-85e00bdaa031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.221.20.144']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b39506-c571-4085-90bd-795b127d34a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.36.35.206']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--773f4157-c900-4814-ab3c-0f96ab31c968", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.6.187.231']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a973ff4c-7d8a-45be-a439-9cc0e37fb163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.82.107.50']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b3b225e-6368-4ecb-bd60-b83e8189e9f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.88.208.80']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c12583-75f2-4800-b1aa-772837773cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.92.113.69']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdab372d-fc0e-4be5-a7c5-ced0984b9ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.105']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e624451-5428-486e-abc9-9fb0105a6b91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.117']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56fcf514-25a0-4c0f-a202-8e9c2a3275a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.126']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06caa409-5211-46a6-ae59-8ee3d78e7daf", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.69']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d79c4a83-3483-471c-b0ad-d50c5bdbd778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.73']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ad48dd-a90b-4034-bd5e-606fce747e28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.75']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6ab6c9d-d623-4d77-8b2b-37862667cd79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.88']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50cc5f97-41f7-4c91-9dc4-28d5f50f0bb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.95']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a92cb554-de9c-4854-9629-66a10fd0d580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.198']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--069a3e67-e06e-4ce3-a4a1-0afda0d0c78f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.200']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c11838e7-dd5d-4bb2-873b-4945225798ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.212']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0229058d-884b-48ea-a10d-325034de19af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.216']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd8f012f-bd87-409e-b291-c329041db9c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.218']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb86405-9a27-4a83-a195-d4dd0d89c3c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.224']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcbc2adb-4d7d-4023-ac29-015393742ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.228']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a15444d-87cd-4c0e-a1a0-b6ddb276d477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.231']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3352925b-a082-43af-8439-f5e082fe5495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.232']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e58599b-071e-478c-bfb1-ed5f71df7112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.234']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cb0a668-c37c-4e58-a67b-340f719e403e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.238']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f9385a8-18ef-4d61-986f-959ea54fcfcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.246']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9551d4d-5754-435e-8086-9a7961ae16ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.247']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d92b13-89c8-4a86-909b-444178077da3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.251']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a41dc0-264a-4c1c-aeee-d7a9ff72f7ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.103.100.122']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bb53f95-cf89-4512-964a-5f0f90cd801c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.107.80.93']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1bb7a74-35fc-462a-995d-1674d6a2ed30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.10']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--781445d1-e2cc-4d53-a42d-56a11624bd08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.11']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47333ca1-5250-4237-85fd-303fa336bbfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.12']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55160d40-4be3-4eea-8dd3-b4098b3afc41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.13']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--492eeb92-ee9e-4b04-96b0-3624f77d1915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.77']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e37216-638b-4137-b4f2-c68dc1f24c4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.150.191.165']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e398ce2-fe84-4099-b533-797a5944c44e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.156.73.233']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d4b68ae-1942-4145-9ed6-e8fbac0cf9bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.10']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abfacd80-bbee-4d93-b498-fb71071609ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.13']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad40dfd5-a041-48b1-8607-16442bf65f8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.32']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5e5f43-329a-4b50-a123-d7e91098d25b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.34']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21993ee-b8c2-4377-a61e-708e0ee78900", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.181.244.84']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f31cad-5d51-4456-bb72-2c1097d981e2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.182.8.9']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5a4cde-9e22-4366-941b-41894a8b742f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.183.242.106']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec69daf2-5049-4fe9-b6b9-02fbb7be4329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.188.249.30']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb3edb6e-b87e-4e23-8479-b3743bc04465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.114.122']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb46110-0de3-44fb-a8e9-b79230e9d676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.182.234']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c90aa96-c54a-4002-b6c8-1e5f63ac4dd8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.1']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33520bea-1b18-40ba-8235-ff9e4b2ea585", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.10']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e12a107-aac9-4911-9cef-defa203a72d5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.11']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c73613e-da03-4617-8a32-a1ec9f5dafcd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.12']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e03fc37-673e-42bf-a777-e99f15b0a106", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.13']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d7b519-5ff5-4b83-8b67-9ff6263f9e56", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.14']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01ff9050-63c8-48f0-8464-6f3d458e2931", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.15']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88aaa2d6-79b5-4bcc-94db-d73cc6d7cf48", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.16']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece02f25-44ec-4a79-96ea-02fa97ee84d4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.17']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b2c186-626c-47cc-8d6e-4284c437889a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.18']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed2bc39c-18c1-454c-8dd0-509a9f063fa4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.19']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2fe9339-c1b6-4e51-a84d-4fd6ba3d7765", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.2']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a20bf07a-c6da-4295-bc90-5b298a9ae1bc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.3']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c718c34-f085-430e-b409-6867409d2335", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.4']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05748119-cacb-4cf8-840c-72d5ae078295", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.5']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--201098e3-57bb-43ea-9908-72f787507650", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.6']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b393818b-915b-4094-b4bc-e66fda335491", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.7']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14bed731-6be5-4f02-8d21-d01feb89cb60", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.8']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b5711f6-6cdd-415f-99ca-2f3acb376dcb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.9']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0640081b-fa23-4612-9608-e610ac60d1ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.36']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f222934e-6846-4217-b7d1-00828d8138af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.38']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98dbd656-aef3-475c-8eff-b23d5acd6589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.46']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f30f49f-ea32-4373-aa86-fcf329ae8761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.71']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33222385-0c46-48b1-92ca-6aa73f93288b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.73']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cd850de-51ab-4a82-ae3b-96725f302440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.83']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf247c14-ef8c-4b62-8554-f35734296004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.244.189']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e04ddaa-9862-422a-b2e8-a979a17ff54f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.202.223.106']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03065a4c-7afb-46fe-8df2-9f1e4e59ceb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.182']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e742b7-de30-4140-af56-5da3c8278d6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.190']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac1a7b1-2a26-4075-967b-9cddc5e72f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.218.138.55']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4723993b-3a03-4ffc-be16-c08ad3617f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.218.138.56']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34da31e3-7218-413b-8a6b-ec2723d6a6c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.224.128.16']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aaf1b53-e240-47f6-a3ec-93c434220044", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.225.41.192']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--810571b4-b343-4aab-880b-a6b8c2026a83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.13']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d20e23-7513-425a-bcbf-3822b17fc73e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.27']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58018f75-d9bd-4633-9548-bec4e857456e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.7']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5537561-979a-4e9b-a547-59d43e7caba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.93.242']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f998e6-e86c-4ffe-bd4a-f6859a5d03b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.228.72.180']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79eda129-79e0-44c2-bf92-7ecea487d3c7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.231.86']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d097c7b0-515c-43ef-8eae-13e4cffb5ea9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.72.3']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6324db-4526-4565-8691-8d71faf81dd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.104']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42565326-55d4-4f3c-94e9-2193d3719aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.126']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0408ce13-67bb-46b9-8447-6d717790b7bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.17']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a132aa4-c9cb-47f5-a1a5-ac6ad385e695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.18']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41591b24-2e88-455b-920d-59e5d2685c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.19']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5885de-0121-4e0e-8576-19d5a4024867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.58']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6277b29-1e32-45e7-96b0-f53391bb4349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.60']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d47192b-9684-4b43-a571-4c4aaace69f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.71']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a02de2c-f851-4f4f-b96b-fac6c0630697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.72']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b789b70-9f6f-4ff4-81f7-f51b6229c423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.8']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a62fd9-800f-4241-aa9e-b0b1c5a3d8e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.87']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34da07f0-5af0-4fd0-8986-8cd8e9b9627b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.93']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee04378a-8a5a-4fe3-96fb-3b71a16e96da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.111']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9cd750d-ce61-4b8c-bad4-c07031a3a370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.173']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--145ca21f-33b9-4c65-a212-6040c42c39e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.211']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f82832-575e-45a8-8062-2e7255907686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.226']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ee190b6-d681-4efb-a8f5-ff778e8d1e5e", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.243.5.205']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b7684a-9edd-433e-9e7b-469fddd92f5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.143']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9cd933a-a9cc-4841-aac8-53db6a30a6c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.159']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e70bc9-3e38-42bc-9659-1a9ad5bc88ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.60']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c521c58-1415-463e-a56e-de6b30f929ed", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.254.95.141']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28ebf13-c988-48f7-8109-b263c0beaa68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.12']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--486b26b3-3f12-4a8b-9b96-4aebd6335bc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.198']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82921abb-bbaf-42de-acb3-c35e1259c616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.236']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6074e327-52e1-4665-888c-c425ad8aad66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.248']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd993387-3cff-416e-9fd9-2f3a4f40aa86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.36.81.23']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aee6581e-7a07-4134-a757-eeff9b88c945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.65.107.14']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c1ba8b-745f-458c-90ea-12abfbd66179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.91.127.85']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f9644e1-b2b6-45de-807f-e2b7fdda87b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.37']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6c9ad81-f208-4a30-b3cb-af5868055cad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.79']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--636102e7-0971-4cda-8b87-58496c55547d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.94.111.1']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c23a9b68-ae43-4c85-b2ac-bb978ae799a9", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.121.244.166']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b85859-5804-489d-adbd-c7a986bbcf33", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.123.145.97']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc9d062-0abd-4c60-a393-bffb6cbec1ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.190.215.90']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e023b761-bc0c-4399-bfc8-0534e7b236da", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.110.238.50']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ce14291-769d-40ad-8f0d-2365e1601bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.120.189.6']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f0065f-4ff2-4af0-aae0-844b7e414294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.130.75.23']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--372468f9-0089-433e-9e0b-2ead3bdb938d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.191.2.214']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1977fc2-1e9f-44ff-9c71-4e9a4a4487ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.211.14.65']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe90351-9d1e-4227-b5d5-68a312819e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.34.131.186']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f09480a3-ede6-4d99-afee-fc2168698f09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.222.238']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2083fa42-5a62-4d5b-99f5-8f74f6f32201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.61.167']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e8060f5-f67c-406e-846c-96736227d709", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.214.210.124']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e761a8b-fd45-4896-a0f5-49917f15efae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.37']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--883fb4db-3478-450f-96db-dd4a22844977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.44']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e1802b1-2e58-47d8-940c-6e2a995742ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.50']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa98c8f-4f80-40f6-88d8-04fc30d388d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.53']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd8247d-aad8-4c95-a3e3-016af6055528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.57']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b4192f-f402-46c0-8f4c-d643c340294c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.152.160.103']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ea44fa-b085-4f11-ad2b-ab8acc9517e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.182.106.96']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c37df20-ec35-45eb-bccc-854c1024ad17", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.11.247.6']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca9e15b-71fb-4472-872e-e28647f22e1d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.128.241.2']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad320a9-55ac-40a4-a214-8c33a90a76d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.153.21.124']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--778a2a8a-8e52-4c25-806d-c72ec47e67ae", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.2.135.111']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--592c7f84-cc89-4b6b-ad7b-e52c29cd3845", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.206.91.237']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f24a6964-a0c1-4ecf-809d-1ddd16f4acbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.221.167.137']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f22eb626-aeca-4054-9d3a-c40cf1ce9832", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.5.200.98']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4109c9da-af7d-4643-ac3f-d4557818f175", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.60.4.95']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b7c6af0-a5d0-48f7-84d8-0abacd7a4b6e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.225']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44fa18a5-c0dc-4e43-ba94-e12ce410e075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.241.76.128']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf5c49dd-a24d-4c94-ac4d-f03ec24cf936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.242.109.20']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b25271a9-e2b7-4a7e-a83c-8dc3d4f1ce11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.242.109.3']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cf405ff-8fbf-40b7-a80a-eb0d09d32ffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.9.26.58']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d60f6ae-2d58-4fe8-99c7-99c858b67507", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.96.151.60']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c492474-21ec-4ee2-9567-1ddd1b7eab87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.109.200.175']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cc1ba5a-3faf-4b0f-88a4-dc7b3339d010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.109.200.204']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa49ecfe-8530-4193-b2e2-4caf2cd0128a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.81.124']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a78f7b86-5741-4558-a9e2-a13bfd681c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.81.220']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84f647e-5a53-42ad-9ee2-1f17249b2391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.194']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c200a3-4dc4-4804-980f-b7dd9173f5c6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.163.199.135']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddfcd01e-6085-4f52-9542-5d12303430d4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.163.207.50']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca2f618-00a3-46e2-a497-42e57a2c34c3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.163.211.4']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ace2c4-48f6-46cd-9f95-4e2fefbde863", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.163.226.177']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f20bd9e-76ab-4371-807e-800c99aff20d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.163.237.142']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd4f8012-b708-4070-9732-4053c6497992", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.163.242.120']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f4c6827-37ae-4cb4-b5a5-6c3440f9ca7b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.163.247.130']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c887853f-74ea-4a77-a756-0733caedb39f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.163.249.224']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e70ae66-361d-4794-bbdc-b4cea54a9a57", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.180.166']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d197c6-2449-4a54-8a9d-ce119cd1612f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.197.250']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a4a600-1345-42f6-9812-a93506951946", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.244.109']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8beb33ba-41e7-4556-ba03-5ef07a755b64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.194.2']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c32ddbb6-3c44-496a-bb83-ac5592d5013c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.198.202']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086976ed-353b-48a7-84eb-4f5272460d8e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.232.240.28']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5fc6ce6-cf7d-424c-af8e-ee8bf7d462dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.144.76']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07035664-44ba-467d-98dc-63912b908a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.156.17']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--184adb94-dd54-48f7-8bb1-8f2c82a2030f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.179.235']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc383e0e-9d9b-491d-ae89-8daf6871c138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.17']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--571b8338-2aba-4b5d-98f3-29f05b13adb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.18']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--206ecbdd-4291-41b8-b745-5a22f9b56b1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.180']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a545733-dbf8-4ca4-a6ae-fc6243c575e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.23']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af25115-f7de-4487-9bca-8001f3f24d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.127.40']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28faa548-61e5-46b9-ab72-dc5f3fafd056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.53.121.68']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e75a97d-873d-4f26-a457-75c4ac8dc462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.131.191']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50659fae-9001-4c3e-9ee9-26cb4dedc07f", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.210.228']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c05bb156-6236-42ae-9052-703a43f59dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.95.10.204']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd6e5abc-78b3-4dfe-8c30-4dc0145648f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.226']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c850cf4-6a62-4df1-a039-45899e1ea72e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.227']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf99d67-01c2-4b2b-a69d-19d535aa17e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.228']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b59fd803-1b7d-4a6e-bb38-2c81d54efd49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.230']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f958846-aea4-486f-815c-a04848d1c8ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.231']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a0ab3b-918f-4df4-84c8-6afb4e557dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.232']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e47ca9-b275-4c1f-a087-23a79711b914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.233']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e7b692-049d-4942-a2df-fe257dc381e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.234']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e3aa5c-601e-4fb3-a6e8-7608698470a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.236']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b63e4fa6-1819-4dfb-a1e8-dfdd6b0020bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.237']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9232d51c-6e1d-4c3a-8e6e-bd1d075510ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.238']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b0ff485-32a4-4a07-96cb-ce47dcfc8ea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.244']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfcaafe5-acaf-4e88-a58e-d8d23fb17caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.245']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c9012e-a723-4017-83da-fbba591794b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.246']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6659ec22-ada6-4821-9b01-3607fa5a4720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.247']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e675d6-0f7b-4496-815e-49151e0c4d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.248']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c97ef7e-126e-460d-8106-4f2286733f25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.249']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f847f89-ae87-4df8-b63b-32f2c4189d22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.250']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5913e41-7fb5-421d-abef-fc1b01c630a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.251']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f01059-d315-4336-8ff3-7771f8a40429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.252']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e017b43-4fbc-4172-9bd8-d0beb879d3a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.253']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a8cc469-e2f7-4bd1-9473-4c791dade268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.142.147.91']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9c561a-0201-43e4-a48b-25675b8b7785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.142.43.122']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18734d83-1b3d-40fc-bf02-2cdc1a22fdfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.182']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ff3284-15b4-4063-a4ce-11ee415daa9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.183']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--182adb5c-16a7-4400-a2dc-938790d0b3c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.184']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--715f4481-ee87-42a9-a294-786c2fc3bc49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.185']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52300e2e-7c33-44fd-93cf-4d1bc43784ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.186']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f971f1cc-f0ff-4f34-8e58-ad84a9f0008b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.187']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e7ca672-af40-4a38-bf4e-b5b798bcaa7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.188']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d33eccce-3363-45a8-9269-861f2811e3ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.189']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8480a9e9-380d-4445-870c-11e1c8201d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.190']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f72404a-73ac-44ac-8d00-00633b0c1b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.191']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8080c101-8e1c-48e4-a044-06ec39f16471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.192']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d35932d6-bba9-4aad-a456-99d2500599a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.193']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70049da8-2978-4df1-8477-686566bcab69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.194']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98423db1-e3af-4f76-9f5d-42e15e126603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.195']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9be2ad5-5632-4e51-9c69-c8229639385f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.196']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a3e47e0-10da-4558-92dc-936368d1e207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.197']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d289044-0ea0-4968-bca6-75abb38f8535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.198']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360941b8-16e1-49b8-95b5-e118bb230a7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.199']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6fa7e85-410f-45c0-abf4-a8d302879d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.200']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a049ce-b9cc-4c56-aaf6-3504eab09471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.201']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd672ed1-b46a-48fe-8be2-53c060ef419a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.202']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b17e1ba-9ce4-45f0-99e3-837db0c03ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.203']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d06313f-ed80-49f0-be7a-7a8c45c7f93b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.204']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dec09c35-0db2-4c58-be3a-4f234daa9afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.205']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50be9aeb-62d6-4732-a2e1-23ba38a35f17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.206']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48105590-1aeb-45d1-a6b1-e0e96fcb8693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.207']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c0cd308-185c-46bf-801b-aeb8f5bb873b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.208']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fbbeda4-9df4-4fd1-a4c0-c89ab3d531d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.209']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f92f99c-a430-4a3e-b52c-64d476d295d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.210']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b04afdc-037d-4848-8dc5-8cce74a55982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.211']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba71d5fd-be9f-4191-b940-577cc4014756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.212']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5376d7cb-3836-4e85-8579-841f05c0f1b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.213']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7103eb8-2630-466c-a52a-ad163e521add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.214']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd1a7972-8b61-4d46-a94f-65283b3961ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.215']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--843aa39d-7cc1-4051-9382-60d4e471b53a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.217']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f013994-0db9-45c2-8618-1d49c89c503b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.254']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48aa2bcf-3c67-47b0-b85c-260ea4044227", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.5']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4793290e-c602-4cb4-b325-16d092a2a4b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.169.194.14']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4591ee39-ad87-4b5a-a9a5-09758980e59a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.25']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df19fd4-3e7f-447b-ab6a-a80a3e4ab6ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.27']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2722bfc3-a486-40c4-bad0-9527d1231a4b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.19.109.111']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d9e2771-594d-416b-b0a0-d932c1889b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.22.147.89']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe365f88-b29f-44f4-a765-5d92a113179e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.227.49.228']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50592b15-9051-43a3-9ea9-c76838a998fc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.100']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d301554-6595-4807-861a-d0fffa3f30ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.26.115.76']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfdcb366-e065-4a2e-80b8-1c01c55c4bc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.10']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3000568e-9627-40a1-aed8-a1bce2ec3161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.11']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55669ba7-687f-425b-9583-04a70233fb11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.6']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d771318a-53f0-453c-a3fb-0e3134cca107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.7']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a30718-4e72-4760-9cfe-35786aec9225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.8']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72b063a3-9383-4176-850c-d2bb8cea2c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.240']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e05161-1b78-4fba-861e-14ff571a331f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.244']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c2d4347-f580-4715-9815-727fc19827d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.246']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b1e7ca1-f5ea-4fee-8e83-1dface061070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.254']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8af9554-a7c7-46b2-a5b1-1aa0f2c659ad", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.39.208.26']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e84d7d-e379-405e-b521-e8123612e072", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.10']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46c12bc8-8dcd-493d-8949-e12485f65cc3", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.14']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b847c1ab-70a3-4c73-b2b0-203756870c00", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.18']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a85948b0-b537-4d30-afd9-e88e97c31789", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.2']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0196b43f-7888-46d7-998b-acbfef5127c7", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.22']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2b49df9-8623-42a5-bcf6-d46f0dbcea67", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.26']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91fd852-e9cd-49d6-a16d-3f63f3779eff", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.30']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e02859-9a46-4e6b-a768-e0165f286a7b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.34']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb0f785-fd26-46ff-8975-8b11ddc1b2bf", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.38']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79732be6-cb57-44ab-83d3-ff4a5c405dde", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.6']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d476b9-fbca-44ea-bae9-0c752393dc89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.120.230.28']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b530f169-9f3e-4b56-a8ed-89816f602cf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.15.52.36']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed50f41-f027-44b7-859d-3678ebf22ed0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.163.160.229']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e891c96-a19f-4806-a6b2-8fbb3278ac87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.5']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ca6940-76b8-4046-a057-94a1f44b9f14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.12.23']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2054a3a-a99b-488b-8301-42a98cf86abc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.48.148']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f94fbbe-7045-4a78-9eab-8447b4877417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.121']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85b440fe-cca4-45b1-9d33-ff514fa3f4d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.16']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fbc019f-2121-4667-8a21-41b684484f4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.200']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b77d1a-8d49-415a-a63f-a83e9e5bc5d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.195.210.47']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a844b6-83a2-4c68-8159-80558564b925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.233.64.228']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f4361b5-421c-40e1-b3d5-4fe4c721a969", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.28.87.177']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0808bfbc-85df-46d9-bf29-314a91834923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.154']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c88d30-49a4-4fd5-bfd1-6e1698f906b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.158']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f70ec5-eed2-4cff-8feb-4afa7eebd058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.59.206.2']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6faa8c3-56ca-40ca-b398-202f273288bf", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.87.208.123']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2806fedb-fe13-4d7e-9561-0f5236be55bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.100']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4cba2c6-723e-4674-a916-be73ed1223e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.101']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a85e844-905b-4eaf-ad7f-59fdd3089bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.103']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4497b9f4-c6fe-46d4-8678-e9b38909cabf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.104']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb8da488-7756-442c-a018-272d48a3acac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.105']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d12625a-8dec-40d3-ba61-5d4b2b6c8b01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.106']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1cb5897-edf8-446f-8e3a-473dbf0d3c7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.107']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29d99978-6643-4128-b7c9-fbb9f8f92355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.108']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc10764b-6ab2-4450-94c5-96b14f059bc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.109']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a76b8d-1ca8-4090-9cc4-806a00583b67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.110']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0268c9a-7eb3-438a-a880-91e60ed81711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.111']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b3ea981-2b33-48ed-81af-f9d512894530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.112']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd0606e-3960-4681-b5af-390c9fbccdf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.114']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e700060-b323-407a-a2e1-4c5431a5a611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.117']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4c11f54-015a-4816-8ef8-cffae4df3a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.118']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16450857-e6a1-4306-ad8f-d639f80ad1ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.119']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c525c80a-bccc-4938-a6c3-a28023e1215c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.120']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ffc1f4-bcbd-4d8b-a706-2ab58a4246c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.121']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b9ed19-36a2-44aa-9e77-4b303d64ed4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.122']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db5d02f4-6fd7-4c7d-b9df-3d9aec390d4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.124']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c21953a3-1dd5-447c-8251-df6548d8dbff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.125']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a92c4b-c821-4e69-8a50-98ef50e9222d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.126']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f80b26ca-4214-4e01-b089-351a544aa3d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.84']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--141a6f03-e093-4851-87f0-4bb0fb249544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.85']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9327544-5042-4168-9dca-a9696bb2c01b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.86']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71dfb1a1-5ec6-4206-9281-56893a82a500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.87']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b532fbed-0c0d-4f50-a942-0bee5e428f9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.88']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04a67d72-eaf6-48aa-a280-42168e9639cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.89']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29847651-e314-470a-85b0-b16315d64ea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.90']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b676ca-64ae-4afa-9d2a-2794425a707f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.91']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0277b0cb-fd58-4250-9681-5d2f4d017516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.92']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e8a806-df60-4e42-aff7-9a75aaf317f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.93']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f525c52b-580a-4051-aa69-ccdcd7497161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.94']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34dd64a5-367a-436a-a9f2-e56067278df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.99']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--786c9ede-bea4-4139-bcac-5b0f0f317335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.23']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5963ca-6201-4988-8053-a886de36daf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.160.220.149']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f8384f5-29ec-4210-b664-90902ca7c8df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.188']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e1b310f-20c5-4de5-8329-d3090a757fc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.204']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d278540-8c9f-4bfa-a099-425cba2735fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.254']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e7b5072-0e4a-4a21-86d4-db5736871608", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.26']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6366b9a7-e05b-4743-966b-e82808a9a69f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.106']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18f733e2-0d0c-42f8-87c4-49b706deb00e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.113']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07fb3b7b-d71a-4f7f-be48-b1ce0c6c8e89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.115']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d951174d-628e-4384-8984-3a10ecf0ba2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.117']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e14d8eed-2da2-4f09-b45c-985905a81cbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.119']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8076876-60bc-4973-b550-ec5242c15e20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.122']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f17dcc-a39b-416d-bc60-f236b4ee2363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.129']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e5fb08-0d7f-44e6-a77e-73dc7ed948ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.131']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9328e9d-8c49-497e-9617-179bf3a4970d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.133']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca96943-2198-4563-a001-2b2b5b32b0b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.135']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97268bd-1ecc-4fd9-8af6-23a38b29d868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.137']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00753116-5c5e-4876-ba7b-9efd74b8e7d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.139']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--940cb0c3-d790-4e2a-a8f7-ad5178d9f314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.141']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5486d10e-368c-42db-8ee4-9370995d18a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.143']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--089b38c7-f6cb-464b-ba1a-9fe02f213ac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.161']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3a4c9a-ed5e-4e9b-8816-07e2650bf7ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.163']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c291612-28bf-4776-a789-9f972d6f6048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.165']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae89629-51d2-47b2-b239-d2803739b7da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.167']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c234e55d-7105-4a73-8990-937d099caa68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.169']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a635b7d-5c58-4485-88b1-dbc77007c7b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.17']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fccd5ec-d9e2-4101-8c8c-c3dbf06ee5e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.171']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8b4ac3-ae19-45fd-ab1d-00c52acf5665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.173']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8559b6fc-6dd4-4fed-9300-49cac2cccbd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.175']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f6b99a6-c635-4025-bbbe-80bdb256bc0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.177']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bde9bc4e-4103-4c2e-a52c-80744c4e08aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.179']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66c7476b-fab2-4863-b7aa-d3ca6e0b872e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.181']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ebbbf9d-e183-4a52-8ba8-53cb90443c4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.183']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00feff6e-98bd-4c97-aed0-59cf09178b74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.19']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d48809e-f24f-4762-81a9-2facb372d3e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.201']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed83a5bc-d8a8-4306-9912-fd6abdf575b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.203']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3497f1f5-5ab7-4684-a8a4-ec2b4bbf2a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.205']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9185e2ad-2869-4a4f-b0f7-94c8747e015e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.207']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e974e732-863f-4b74-a735-d9185a88b49d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.209']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41845760-0659-49f4-a549-83ec02e829dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.21']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e8325a0-e88e-4a56-9cd9-f858bb470759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.211']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b7549f-d05a-4b6e-b048-5ac45a9830fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.213']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--042038ca-83ac-432e-83b8-ae49bdf3d21e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.215']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad400e5b-b785-430f-9e5f-accbd6c008d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.217']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a8d52e-1902-4265-b4d5-3bf1b1ecf6cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.219']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--835ebd94-c357-4345-9611-dc3d98fe3c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.221']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7812b66-0366-4fa9-bbf0-95ed6fabbb74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.223']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c0c366f-c86a-451e-a0b7-7e0aad4d8352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.226']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--526d8e1d-8e4b-4e9c-b6be-524517b5f69c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.23']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e86323-1833-4c8e-aa96-ac42ff926b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.234']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27cbfa26-f07b-4dc1-857d-568c33e39462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.241']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c4bef1-a88a-4588-a461-d3c90820e300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.243']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--880a48cb-f9d4-4cab-8071-e0ea48b194dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.245']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c2de0db-4e69-4452-9422-1aeea4936062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.247']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49405c8-af77-40c1-9ecc-533fd30dfe4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.33']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a29492f9-2425-4447-b925-93440d14a04b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.35']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--291174bb-94a3-4dbd-8f70-75cd11977e93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.37']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b736aaed-c7e3-458b-9d3c-109cafa4a038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.39']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d8a6cf-ca00-4994-a438-610675d9cdf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.65']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e6b5101-0936-4bab-b862-3c67d5856420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.67']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943d43a8-1b29-40a0-93be-67770e509987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.69']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d8ab77e-cb8d-4e3c-9e8d-fa829b632759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.71']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0722196-3a2b-4b71-bb02-8c2426fe24f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.74']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce735205-41d6-431c-8b1c-6daf941dbe0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.82']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ca07ec-9cb7-4e62-ada1-688cd8b9e6ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.89']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3f6cad-3d2d-479f-ae19-9a82b56c227f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.91']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc71ed5f-30ff-4e3a-83b6-4f6e69006a02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.93']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f757a3-6723-4110-aa4e-987a774e53ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.95']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20be507c-607b-4a20-aacb-bdd6f7573d44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.210']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aacee27-6f48-4f8e-9e2e-0b291f7c4ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.211']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6555bcb-8fbe-404c-8439-5299b5c843e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.217']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0da6fbda-408c-4801-900a-5c87a98980d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.219']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f697037c-3c09-4fa8-8862-71060fecb8da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.242']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7beca5eb-8cc7-4a49-8ff3-3e88faac7469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.244']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba30635f-10f4-4efe-9192-12ff80904c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.245']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb8820bc-51e3-47c2-8385-b5217be9077d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.248']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d69159a-5cd1-4e0e-a26b-d177d76dc6b4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.250.28.222']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8de6fab-e24b-4b67-8e0b-2e067923cc82", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.26.224.235']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e76325ab-d3d4-457d-aa63-28f56215a6f3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.138.233']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1a465a-b3bd-4a82-ad56-0791fda7d656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.118']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8b61a7-b2db-4e14-b9da-07fcde1d0b00", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.188.116.41']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5814ab1f-5295-41c0-b483-31ce42610ec3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.248.34.233']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08e256a1-0f56-4fda-973f-071d6be8156b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.1.114.233']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc8c3e9f-045e-4413-b5b3-79f0fa63dea5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.1.115.76']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--622b4666-82d2-45ef-9bf8-074146377bf5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.1.122.117']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac20f3f0-ba1d-4bc1-986c-939ce20f81db", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.1.126.196']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e738fc5a-7d14-4b14-a57f-21da35cca1bd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.1.66.233']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13226fdd-875d-4adc-8fc7-b828988fd073", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.1.85.26']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b0106b8-8998-4fa3-a485-3ed6f3637c89", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.1.93.192']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c53f78-b91e-4ec1-a6d9-d46b21e5a303", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.1.93.90']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58b6f098-e587-470f-9c3d-dbc77c59c131", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.12.251.137']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eebb2e0b-4c26-42dd-987e-9d8424f32c54", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.154.202.222']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7391835e-5762-40c7-a550-a588d1b462f1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.154.243.123']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f72ec3dd-63d6-4569-b607-8f96f16e4ada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.177.125.186']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee975809-796f-4b88-9a80-dc144817f366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.106.159']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c53f191a-db70-4462-982a-903e92941b9b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.56.226']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b375b1af-ddb9-4bf4-9bdf-24dbaf3453a9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.88.161']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e17533d5-e9be-455a-b7dc-c5e00fac28c6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.20.228.102']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd72986e-0f16-4d4a-93da-57bd2115c0ea", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.20.247.186']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--929cc420-6631-47e5-ad33-fa0486e8ed15", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.23.141.130']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f119c77-ccd0-42c5-8d5b-e638baa93c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.23.187.159']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46e42a2a-024b-4493-bf6d-a49cb5f37150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.100']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee5e7c0a-1ee3-4c31-a1c1-2474b4eb195a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.102']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2b0ff0-d194-4fb0-a1f5-019eefb6b695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.103']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3400134e-7af6-403b-bb46-03353f0a454b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.105']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--922c99c7-41c5-482c-8edc-fa005a1c192f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.106']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--658d1444-76f5-41b3-9e59-b141fd2256dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.107']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f94b49-ea46-4dcc-afd2-542ea467f004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.114']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d52003d4-38d8-4398-a402-ee05f370ac74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.115']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9135f51-8520-4174-9e7c-b911fc275672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.117']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e3cf8ce-88e3-4bb6-99d8-8e8020a97e5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.12']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3fc8030-a1cb-4c1c-9a94-382ab15f17d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.120']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c052c105-974e-4199-84d8-3b2a20db8937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.122']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a81f9075-2151-4db3-a5be-99560dfad29d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.123']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22a7e69-327a-47c5-9237-4fd40eb005de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.124']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0085ee85-3d8a-49e9-9629-55d92b65ed08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.125']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09980b2d-1d16-47a6-890a-be6e809ab33a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.127']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8661a83c-d28a-4b96-a758-935f20df44a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.144']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0e7cb3-debb-4333-81b2-abb41faf6d23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.150']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad0fa633-2057-455c-ba4f-c52f3b07fb1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.155']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--623792b6-11fe-4506-9f0b-d57bb75f6bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.156']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c792ec-a9dd-4177-a24a-21cc97df7f52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.162']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4383dc0-af99-4029-a0fa-4aedba48206c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.163']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90a626d1-795f-4b20-aac7-476a151041a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.167']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10637eca-aa39-4e7c-86d0-2bb1492d7b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.171']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f3a700-b5d2-4e9e-8db9-aa0ab6076e54", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.18']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e90482d8-089d-47f6-8f09-b4a2fd5dcf3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.183']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24fdcf25-7336-4b34-a0f7-25e9f63cc0a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.184']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6f7950-b585-49fa-889f-2a8a03505c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.185']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ef9d744-3c56-4ebc-9b07-fcebe9811aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.19']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7371ba43-e577-4f8d-b031-f0a7b5e36062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.192']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e7969dd-ee8e-46f4-adbe-44aab24d283c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.193']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f06a10f-5090-4421-97a9-d3ce5b3bb7af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.196']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe5bfc96-8d9b-4aef-98b6-590cf35c45c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.197']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7befbe58-e6a7-46bf-b234-bd2d0962312c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.199']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43b616e-2d77-4df9-92c5-fe7e7154d441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.202']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfdde40e-60da-4130-bdd4-83459e1e8bdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.205']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fbecc30-6c29-4fd5-807f-e1e8d90d1315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.206']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac4c476e-7fc7-4284-9da2-065fda33919d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.207']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c868bc6b-9601-41f6-966c-cfd62180872a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.209']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94bf24e2-4287-434c-a96d-0fc2d6b07e57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.211']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f68e17d3-452b-4c9c-a1f4-b5d396552c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.216']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9441175e-8f40-4c7f-940a-4f13e7c9919b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.218']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9379bf-44dc-4956-a1fa-ec9282b13ffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.221']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83f8df3f-6ac6-4c50-9ce6-cb08846df1c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.223']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49af647a-a3a1-4dd9-bbd1-91071c90a855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.226']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858b56b2-af09-47a5-8371-b9f369fd7449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.230']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f61dd09-796a-4957-93f1-6933adfb93e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.232']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fb229e8-a007-423f-bc95-9a54431f266a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.233']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8136468-d8fc-4f84-9030-14c1b6153c09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.239']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4413d972-440e-4cf7-b60f-9edc3c986506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.241']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b47de7-0a02-4ce0-87dc-59bcb906b7d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.243']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c24c8a-2557-41a7-a6e5-7d47a3a9c454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.244']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58840e58-288b-4a41-80c8-c31e8fc519fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.245']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1557c2a-011f-4c65-b997-ec1520cb5784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.247']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac01dc4b-6185-40d9-bfe1-e24ebb1bdddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.249']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--accf8937-b24c-4794-8498-fdff1b003439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.252']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d5c3c4e-6b96-44dd-892d-0daf7d5874df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.254']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac95d01-99b6-46fa-bf65-e2746868aefb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.29']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f1765d-5a84-4a15-948a-fd195115c6b7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.33']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5c5989e-69c7-45e2-85a4-569b2dbdf8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.36']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd302bd4-6d3b-4f40-9894-ef1c3bcef7fe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.38']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f54a45a-a6d5-41f8-954f-84faf4a2414b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.46']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34e10a5-7969-4af2-99f2-a44016c9a81c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.48']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c71ce4c9-d81a-498a-a73c-25dded0abf28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.5']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d3e911-bda6-4d6f-80cb-8aa0ba5d2a10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.50']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db1ff82-361c-46ca-ab61-1962d0a4d0c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.54']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df460369-2618-4216-8093-2e6d2f457023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.57']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c67abdf9-0710-4134-ae8b-c20126657a36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.58']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb8448f-4d24-423f-b965-77ac0ac5ebd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.59']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--940824b3-7ced-4651-95a1-4af3bf7900ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.60']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c34556-8492-4dd6-b194-30fbad69fcb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.64']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d1f5fc6-fc79-4cf5-b5b1-f9875b56fd86", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.65']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c66eee20-a440-46e9-90f1-e839387e80e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.70']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9118ee76-731b-4810-923c-98f0a2316dce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.71']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cde5d83d-80bf-4281-a374-129c9887b5f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.72']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ef62ea1-6103-4b08-a28b-b80986276e72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.73']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b698306-84db-474f-8bb4-806d0f6f8742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.74']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d24366-e597-445e-95c4-27e7f9b99014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.79']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12eaf865-20bc-45a5-8fb4-ae538854460b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.80']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab49ad9-792c-41a2-82a2-b91b28bc83fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.83']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--564982e2-48ff-4d2a-9217-777e6097d63e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.84']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b670012-2ccf-4ad9-8cf5-99d9e79490b0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.85']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4de05983-728c-4af0-9c31-dbda6ef4ea43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.86']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dede9cd-d86a-4569-8c14-4c4309988f55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.89']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c244c3-31c5-44da-8639-11bd64a86816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.90']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2adda27a-c6bb-41d7-b0e1-73758ad17dd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.95']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b1dd45-e773-466e-ae54-05e172290bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.96']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f97b11-7f0a-4063-864e-9fb62a4e9489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.97']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e2f218-bc72-48e4-a151-758dd6cde1eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.98']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ccad82-aba8-4f58-b8a3-7daf487321fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.99']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eaf19b3-c13c-4eef-95e6-e75aa56082c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.46.200.132']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ab4332e-92e6-48fd-98c3-b195737444bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.46.216.242']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfed695c-db62-494f-9a50-073332a08ec7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.57.154.79']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--496b7497-3616-48cf-8668-e2ee6282134e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.57.178.214']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98804acf-9747-450a-9ba1-7e860b9f1cb2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.57.187.216']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a4124d-5ac4-4e17-b00e-be1069e43d1d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.57.215.150']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1abaaa3-3d54-4a0f-a82b-ea7efddcd37b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.57.216.254']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--735ddf4c-9ea3-4852-bb1b-e90bd17927c7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.57.219.201']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90c603ac-3522-4cbf-87bb-b1b3f7ea7eaa", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.57.225.163']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a2890f-8f94-4c34-9bd0-8771712e29c9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.57.226.95']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b06a612-768c-4a2e-8ed3-e3ac655a7f90", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.57.229.120']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a51092-4ea3-41c6-9172-b5074796c387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.50.114']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1e36bb6-d86a-4702-8af7-7906c33a4d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.46']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad5a26e-dd22-4c45-b6c0-91e4c51d9a52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.66']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f53d3058-9b20-471c-b345-1cf02745847a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.148']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4596f407-e4e7-4695-8bbc-bac7869a2186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.52.145']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cdf5bce-5807-4fc2-9db1-07ba7fbd2790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.127.63.58']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0507169-4aff-44c3-889f-a7400bc3df86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.30.231.6']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce8351f-c090-4503-ac16-b1a37b07cb9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.116']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5c4a5e0-e2c3-43d5-9fa2-84e93c55241c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.119']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81da4513-77d1-45d2-91f0-7576a8218d51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.128']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49dff1fa-14c6-4163-80fb-7185ba3d1e5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.133']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--252b4140-4ee6-496c-898e-3e5712cbad2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.135']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2986c3e-36ff-4796-a1b3-05590d3a5e63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.140']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a20fe9d6-695b-4859-9c48-f3c475bcf840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.141']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d69c05-9464-4bbe-86d9-599515dcb6e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.145']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa41884-3f8d-4eee-946c-086ce7972aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.146']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e7d9f0-bc77-4cae-96b2-18cc23349f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.150']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8f8ec1-6dce-448c-a29f-fd0d1338c430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.176']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27632bed-ceaf-4c29-9845-c0ab1e14c03e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.178']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7cc1c28-f923-4b09-8500-77c3521b4bdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.179']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c98cd12-51e5-41a2-ae6e-f828863cb88d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.180']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0c2db2c-b55f-47b6-9a25-e6537b58cc9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.181']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd4a7389-b7e4-49cf-ab6d-befc00cd4813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.182']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b61211c5-86c3-44e4-94c8-8bf63fccfebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.183']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e6a6e77-66e1-4c0d-9633-004511fd9a32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.184']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d852c6-b820-4b9c-97f7-912ce4fda0da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.185']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a23c5c51-9a4f-4787-b606-d50076cc93b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.186']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ce5785-42c7-4813-af41-1cca832dd316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.187']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084b831d-a00d-4154-9bc5-65a126ab4f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.189']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84638e97-7d14-4b5c-91e1-8e6fca083aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.190']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9c60a38-dbcd-4f51-b67a-9b9bcb896562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.191']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c50a063c-68f0-414a-be01-5010d30674ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.73']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e23e9e7c-fcc0-4e3e-b2c2-58c68daa184c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.81']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6596a2b2-5b80-466a-bf95-878671eee4db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.92']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e7ec206-8fff-4db7-bc6d-4a08c153865f", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.48.128.86']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4a3686-bad0-4c01-b780-d29ca2ecf2a1", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.180.154.87']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69be4426-8a2f-4fbc-a662-7f161f243271", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.112']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2249ab22-c68b-4a80-8a95-6786788b2abe", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.25']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4f61c6-9944-445e-8cb6-36566e6b64e2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.238']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a76511-51f9-4ffd-a833-72e5386786c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.58.202.98']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1c5293a-8ecf-4177-aa47-25f308bdbbe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.63.211.145']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe70f2f2-b7d7-40b3-bc69-f986913c549f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.108.84']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5b6347e-0be7-432d-9658-e521a8c9c8e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.195.185']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b6c3049-77d6-4adc-ac1c-5f4b4eeee72d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.196.4']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb82cf2a-220a-4894-b616-4473895d9b60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.206.76']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a78d310f-68dc-41aa-9269-ea5a15b7e532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.57.122']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42bbe532-8cf5-4189-b220-ec8895d625af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.57.131']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54921fbb-133f-44bd-ade5-2ab7b73b9107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.57.180']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1be2086-aa9b-4264-8d33-57702a9ddba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.109.206.64']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065c580e-ada7-442d-bdb7-75b7caa7258d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.90.228']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e819baf9-6a11-4673-9472-637750ff5d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.200.9']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a9af692-b857-4c1e-9c2d-8c02bca543f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.233.215']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7def460-fdd7-4b00-9069-469445d55367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.24.61']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f62f3df9-e573-44b3-a2b9-0477da7b09c9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.41.6']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5edfd64d-e1dc-40be-be10-440a8dbcfe55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.45.222']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f8160b7-f71f-4292-a0cd-23043efed9ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.46.95']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93c33968-f424-479b-9589-da7da190aada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.155.221']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73f5dfee-95da-49c5-ac63-e6be0975b26e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.202.110']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f383271f-05ac-49fb-8af5-3a0edc0d2deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.214.160']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2ce7d6-9293-40a1-ba69-2e80f4df73d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.247.34']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61604cf6-e337-4c0b-bf12-5b5a3301af52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.238']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5ad1aa-f617-47e0-9e52-6d604a82fd13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.80.89']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a61230bf-0e5b-4746-80a1-5a383d1a71cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.88.205']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf1040a9-3415-44ab-ab9f-f2352ca208c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.94.72']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9fcd2e4-85ea-4786-9d7a-bfea406a2e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.169']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1072c0e-6158-4fea-94bf-79afb293a76e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.245']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64eac41a-2027-4753-a2ca-27786faa24e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.192.96']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0f1e74-d804-458e-bbba-159e0da20c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.161.47.114']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fb9f5f6-8fc5-408b-8c91-145b3e0eef90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.161.58.227']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9d37d9-c75f-4f40-8d7d-fd0961c84ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.131']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8302ae5-b27e-49aa-bc8a-38438c79cb39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.5']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb557b44-f514-4c79-8ae2-3564678ef8dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.123']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d935a2-122d-4094-86d1-b64b7ba25953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.166']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3154882d-365c-456a-a231-43388234f2c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.173']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d3de5ec-74b9-4ad0-9d29-d38a326d56e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.176']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28f8380e-5500-4c0e-898a-a1244dabd726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.196']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c29fc8b-3584-4dcb-9453-aa78d2d38776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.43']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd6a0258-e125-4e9f-a969-55d6418d256f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.97']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca2ab3da-494b-4ce2-b456-5d41ff54abb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.151']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da482f5-af05-46f3-b8d4-cc36d45855f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.246.213']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9128965b-1a26-47c2-905f-1fccea9de0ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.32.78']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d7a242-8772-471a-b08f-d11767b12d10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.94']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75552fb8-8dd6-4fa9-bbf7-86f1f2697756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.5.58']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d279c513-be5c-4d44-84ba-94f85c890c89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.6.104']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08343898-cfb1-4e85-967c-d87dcfc832a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.199']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d388a09d-1ac6-40c4-98e1-1a52927226b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.61.119']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2446a11-3fdf-48a5-86e5-62b5f16ebb47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.74.182']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310fa16a-56d0-4418-9518-12de3c01e344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.8.222']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d5e8e4-5544-4016-81f1-c83a5bde1c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.132']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aca62943-0660-4741-91b9-283eb855021e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.107.40']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0cd22f-ee0b-44e6-a1d5-85f4b87aaed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.101']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3582911a-98ff-4478-a2f0-c4c574c9999a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.238']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7635648-e7ee-479c-a21c-7d8192f478ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.93']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ec3e4a-49b2-4aa0-9919-8cff6b76b4b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.95']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482bd9e3-aad1-4771-a1a0-0b3ac305b840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.6']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e0499ec-788f-4490-a3c8-f1a4ba641100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.60']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80e0cad0-80c8-4ee7-9e29-31a51fb17448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.88']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1dd940-51cd-4828-bf12-d9bf5e83376b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.123.228']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb3c818f-36c2-4533-b576-d52abe778838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.123.252']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e7ad91d-b881-4538-81c6-c5bc6b32fb62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.125.66']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b678d659-844c-402c-b6d7-7ad92aa31102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.125.91']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--495c70f1-b70a-4398-8038-16dce7533ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.123']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1cb5e4-d48a-451b-8910-9b4a2fda3d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.13.53']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3df74a5-5b46-4818-83f7-c415ac2ce718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.5.220']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf7898f-84da-43d2-b2b0-17ae461c3f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.120']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4b9b5ab-df0c-4183-ad42-c8dc36cfaec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.241']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a19fa4-18b5-4a42-b29c-cc58f8ecd824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.88']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--549c8e14-5b35-442e-8c6d-6fd21222e860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.10']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--571abb1a-5cce-4c24-afb0-ebe192ee18cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.168']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95bf5720-207b-41c6-a670-c840d4f3ce26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.253']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df30b8b-929b-485f-b10b-2eef49c40235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.49']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241f0f56-03bf-4276-b32a-933dd67c528d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.105']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d15f1c0-5676-4545-8cd6-7f6ab857bc1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.26']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c38bffe4-2eca-4363-8f8c-9b77c5c9fe5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.128']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b4441a-7468-4bf4-8075-19b6cfb7019b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.239']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0713907-9f05-452a-aa11-d8825a626be5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.26']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba42d3f-5e78-4d7f-9f37-ab6842f68a1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.231']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a03463ee-5e2e-4582-982a-6f4180dd9526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.63']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ed14a6-d1cf-4417-a950-564f4ca5ac4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.53.116']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1854c2-9f4c-4077-ac8f-fb619f42e317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.53.33']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dec51f8c-c294-4ec3-ab84-6387cd91643f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.53.55']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c72ee7-8f05-432e-8513-4a4a4da24d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.73.145']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--501232e0-f145-471d-998d-da2e8b948f8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.75.247']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--682c932c-86f0-409d-9b6b-89c4dc8af0a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.91.108']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b63e249-916d-4b57-9246-b0a2de84fa59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.32.10']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7865c5-6033-49b7-8a28-d2a92bc63210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.149']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ab0a09-3ebe-430d-9196-47bbc53d32fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.186.232.154']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12dd077f-6589-4bfb-b8bd-5406523aec2d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.187.153.135']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e97e6df5-ba81-4e80-a05a-f570077cf7dd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.203.42.204']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a054593c-c542-4cf2-80c9-67a195a37333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.213.62.162']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99bbff55-abc6-4902-8100-4ca2fb237558", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.228.179.34']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--653fd360-22d1-4d84-8720-837f7a1cec42", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.244.90.19']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8390429-68f8-41df-850c-0088bd8e2bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.19.106']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--110c028c-e9ae-47cb-b036-d722cf4e1089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.166']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0ab99eb-3daf-4c53-b708-0651d3da0e78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.58.2']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3589716c-de2a-4726-8321-89a85762cf82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.33.240']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47aa550c-129e-4cb7-939e-a44e9fafad17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.212.246']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b9bc1b8-faf3-4c65-bc29-3a5d1e9795fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.216.95']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96df9199-6622-4854-acf1-266a51687c4c", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.95.196']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10ce45e0-9ec8-428e-a513-b309de5f5793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.49.13.180']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f8733a-af0c-4d1f-866a-fa914d3c9439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.15.97']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acf20990-d4d7-41fe-a141-3b253f244823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.213.113']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f007308a-8d22-4178-9065-7f4daed0c413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.87.54']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7239aa3-9ea8-4ecc-91d6-bb0376a3d2a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.88.105']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a27211-265b-4198-a798-1a1f6be84861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.11']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec199feb-94b2-42a6-8db7-cb8c97c4d121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.114']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2177a396-7e84-4dd6-9650-0624cc3a8665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.177']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--668e4205-c178-44ed-93c3-1041f981df97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.20']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b35a99-75ab-4108-94d5-98270e5e6f8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.78']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9711814-80e3-4223-9250-27552660ef48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.152']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d613a004-7672-4e83-8bd9-48861462c864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.183']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3cfb52e-5437-4b4c-bcae-ebd790f7ca5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.221']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0b740c-7eab-4a27-a08c-f1b25b3635f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.235']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6769639e-f78f-4437-9455-86dbc1682016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.252']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d32c0462-b7d0-42ac-9508-9e2b6d017989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.39']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b41fd3-abcf-4871-8e21-8d4b8906cf18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.116']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ed2353b-2827-4a85-aebc-f2b76da94ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.19']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e5675e-5148-489a-9b62-165261ad7d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.75']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6922b62-adba-40a3-9efa-76c2d645624f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.138.21']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcebd1dd-75c6-4158-8e52-1799f4a50411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.144.62']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b26c040-3121-4345-878a-74c5c2a406c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.237']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f06ad58b-af16-4671-bfa3-a923042ef38f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.71']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8adac15c-2dd5-479f-95a2-bb34f4a9b89a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.98']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96faea25-5bec-4e1c-a32e-9e1403362045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.127']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dba0b888-9a89-4289-819f-65b7e0d1f548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.136']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889640c5-d3e1-4976-a337-c52d0f86e954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.159']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f57b5a6d-c4e1-4998-93e2-e01d729c3fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.205']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec2d335-6c14-4f43-bbf8-803894c64c37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.225']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddfbc417-8ece-4987-9109-9cefbb29ed98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.233']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4704b454-44ce-4190-848b-c218ae42a917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.55']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e1b2af-bce2-410f-9c22-e9ccd5813c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.111']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b36f84a-1bb5-4abe-8cbb-06e8f3204218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.119']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50cef3a7-2d20-4cd8-9b46-d7e409435411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.122']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39099929-1306-4c56-ab8d-59f7cef71f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.129']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb2d45c-4119-4862-a6d3-d61fbd25d0b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.132']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69176c28-aba0-4b69-9ef7-494129d6924d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.16']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f24860d9-5ba5-4670-b757-3f6e75581cbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.25']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c014dd02-4cc6-44e1-ba1c-fe4a869d4109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.27']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50874b60-1b51-4680-a83e-f2ce9ea53df5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.47']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e49e980-a58c-4f2e-a770-7a3331290669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.92']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e9e4cc-b9be-4f64-8595-82baad9baa55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.108']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7694b28-3fe8-448a-876f-66969a523b49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.113']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9785ddb6-5e41-4b9c-946b-42e049b68f58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.16']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b99180f3-5cb6-45b0-b4db-f1a02e207c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.19']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f9b53d-b501-48a7-a47a-73a6a138c903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.20']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e11de5b-d90f-4309-a821-7fb91e647723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.32']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9379466e-44c0-42a1-b0b3-8aade8a7a132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.37']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c68936a3-3d45-4425-809e-097e56299d51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.38']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53afc75b-d3db-4fc9-9613-a85b9618180e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.58']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b313eb-41ba-4a29-a001-fe2c6e32d41e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.201.33']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629db91c-4cd6-4772-84f3-98880b2cbe41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.49']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b02d46dd-b596-46a0-a5a8-5770c2ac896b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.74.239.137']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c436aeb-3305-455c-bae9-94985055d49d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.160']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c6012a4-255c-460e-aacf-26fa424f6f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.167.20']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--098688d2-cfdb-4c53-855d-fee8a36598e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.49.78']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d1b94a3-ae42-44c3-a871-52edb473bba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.117.189']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a053d2-d7a4-49ff-ba38-c750d5cffa9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.119.5']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be84a7b2-4bbd-4692-b5cd-b091b1cb25ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.145.62']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f66bfc7-91a9-461d-868a-0677e4bd7af6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.170']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa58441f-971a-4dc9-82e7-deab2ed20821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.166.43']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ef0a49c-7680-493c-b91d-5c6545cc0510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.58.231']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98a19d4b-6326-47cb-bcb4-6d3d47945ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.12.40.222']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58c6f8e-2f5f-4c1a-ab3f-5dcc9ecb784c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.149.53.243']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2350799a-5bdc-4253-a927-cbc930622b7b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.17.133.138']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--265041c5-947a-4e46-ae62-085586f6b27b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.249.205.94']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--450111ef-e348-4326-92e5-619e05fcccc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.106.54.122']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85eb9489-d9c2-4522-8d8e-e80ab606d828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.54']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a081d59-6087-46a7-a696-a519ad235463", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.145.0.112']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64456c7c-9ef3-4eb4-a8ab-fb74e0e69233", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.5.200.3']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb5f52ef-d286-4785-9ec5-ac3f8386165e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.71.141.170']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e547b16-821b-4413-b7ea-0851162fb6e2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.146.102.66']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a69448cb-c36a-4a34-ba16-0975b5adc17f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.161.38.233']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ba6458-48d6-49fe-babd-36d280715026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.172.221.88']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99d78ebf-b296-4a0f-b094-1a021ff45af3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.23.128.43']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a35da5-ffb5-4c90-b0e6-779b9ff50bd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.3']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910d20c0-5879-46cf-a3ca-2646220ac1a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.4']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25095ae2-be99-4d06-b6d4-6e015c4c9ca3", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.5']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed91c75f-a03c-4b82-9f0e-c495c59807f4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.44.70.181']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--996fceef-5794-455a-a165-b27bbd346db6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.48.26.232']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c10a7bb-5dc4-40bf-9fe1-98d7b635980c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.205']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d68868f6-7906-4460-ac08-dbfe10ffde97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.101']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac8cec9-9545-4376-aa2f-eda419d6bb16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.105']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f4b808-137c-414b-9c43-65853e45c45b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.108']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--670deed4-d65c-4c52-98f5-9dcc31a81925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.109']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--198d5ada-2600-4a1a-bd20-b9f3ba0f447e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.111']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0b05fff-b1f7-4360-901c-840e7eed3be0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.131']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d875c6-b1ed-4f3d-81ed-1f49bbda46df", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.132']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01388f0b-59b0-4faf-9351-7af3eafe6cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.133']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f410dc62-4477-4fe5-95db-996314cbfb60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.135']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e9377a-17b1-487c-bbde-4cd55f7f6f74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.14']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3105f5b-0756-42ee-90d5-81b045a832cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.143']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a03429d-4482-458a-819c-69fc342ec67a", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.152']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--309ea30f-1c9f-4159-a447-eb4b595177b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.156']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d8e192-5e14-4534-bf78-3fe1ee96f6d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.163']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c5f107-16e2-4411-a2a6-766a04114e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.164']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd95fd3a-bac8-4bc1-af5f-0520034333c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.167']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--087d61e3-5ac5-47d4-88f6-d99915b7782f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.169']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b3b16b-f3eb-4625-ac60-bfe787675183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.181']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be43b15-5804-4f3e-bae7-c302a35bc067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.186']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4641b3ef-08fa-4d77-9cad-c947ae49e034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.19']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a6bdee0-d899-4fbd-aaf3-d7a64350c0ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.194']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--422091e9-3d76-40de-b08a-dadabd892fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.196']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76299562-f5c1-40ae-bf91-971ef6c61d2b", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.200']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7124e86-f94f-4117-88c3-e6701635f8a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.201']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f58265-c939-4d4a-94cd-fa959545988a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.202']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06d139ad-fbb4-4e7e-915f-15be42379f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.204']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ddbd27-1995-4559-abbe-335158258a17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.208']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9974c39a-b0ea-457f-8b74-daa6a71119ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.210']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e32042-ae61-4788-8116-5ccfd424af62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.211']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b563fc3-c1c0-45f6-ade7-5906b38f3821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.215']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7451b2f7-d4ae-4cd9-bbca-08327a73f41a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.216']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d9a5e1-af58-4e54-b6cd-6be64c2e7cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.218']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--898f6715-749e-4a26-87fd-4ca8db043856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.219']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d94f7446-e06e-4a3a-87a3-2a3d5fd5c9c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.221']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4296443f-5af9-47b8-a9d0-6d66d07a8276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.223']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef1e04a-17a9-476d-b269-59ba46d372d0", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.229']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d1f366-b79f-4334-8827-3531fc24ee95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.231']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b1499ee-6593-4c5d-b105-f7dfc66a0638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.233']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ecc64c3-0d9b-4d6d-8af9-37de4b3e409c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.234']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a389aba-f679-4c13-9ca3-12d9e44c8748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.235']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a21863a-abef-420b-a321-8032c0560282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.24']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2822c015-18b2-40c6-b177-06bef3cb22c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.243']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0fd854f-21b1-476d-b75f-555d36215703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.244']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd84d40-97c2-45d5-ac6f-60e16d33b788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.245']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fae7f43e-0993-40df-b88d-173d4235c14a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.248']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b9cad5-60d7-46d0-a279-d5745e5bdae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.249']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad199c4-0786-4a0d-9fc5-70d68b4393a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.250']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87236f81-04a4-4318-b0de-976788fae4db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.255']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d401dac-dad1-4b96-a58e-d77761615028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.26']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--016223b6-b4d1-46b8-b779-a1f8aa12f68a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.34']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d6139e-850d-46bb-9b0d-4f062a666cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.36']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6c76e63-7f87-418c-b58a-4b983607048e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.37']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e6b84d-b13f-47a9-9cc9-491720257e27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.40']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d617b95f-3d61-42e0-9230-8327e639f85f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.43']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d319b89-0ccc-4abd-a15e-595f47d00105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.44']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d29546-def8-499b-b154-07f254be6ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.46']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c1c5a97-cc42-4bb9-be71-f7674b4a320d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.48']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7749878-f727-425d-a4d7-385bea1624bf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.5']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057d370b-cb85-4b8f-afe7-d6fbb9493367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.50']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeacf9f3-79ed-4d87-b3ba-7720cd4a4eb6", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN activity. Sensors: openclawglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.51']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "sensor:vultrmelbournetest", "protocol:openclaw", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3975acec-a0d5-4a31-ba99-293796c81bde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.52']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dcc5c61-84b7-440d-9333-c54f72dd4c5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.55']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c64438a-a1af-445c-abbd-0b57de71ac09", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.58']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c91f75a9-b792-4ea3-a4b2-87332e8797be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.59']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93e31963-824e-43ce-8625-5d592472dcf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.64']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a85aaedf-6a56-40b0-950d-c235c42f80d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.66']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1407459c-d34c-4be2-866c-3d71f6888323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.67']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abd286c2-76da-48f8-b2fe-bc752e7b146d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.78']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9bf4f50-b3dd-460a-8830-926e7d4b50e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.79']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c5c68eb-d526-4c4f-90e6-cc2e455600f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.82']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83355211-b798-4830-ad9a-ff40767efe1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.83']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf34b05-acec-4b5b-90cd-46542a7df290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.86']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a97c48-e509-4c84-80cf-daa3c4e8c8f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.89']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a6b9240-d0bc-4227-a92c-fdd99d241f2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.91']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8dfe43e-1ae7-4dab-9ae1-534622ffb28f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.92']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c8ddefa-d277-4f49-9917-0cde376f2382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.94']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713bf00e-fb2c-4142-b89c-f3106962dd5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.95']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae97d30-c9f3-4536-8a09-55d80267633f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.98']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2975475c-4a16-490a-911d-2bf883a84b01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.99']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdbe4f28-9a03-49ba-87e2-82c2b6b5f909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.0.166.96']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f630999c-98c6-45a4-953f-042ed9a28696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.12.104']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6adcb3f-d419-4d53-adf3-14fae3cb40ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.120.50']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b854273-055a-400d-a89e-34a99d67f005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.220.72']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bf92e7d-400f-430d-918b-ae90a5b94940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.230.61']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef25573-fbb0-4f6d-834d-37f53a7fd900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.84.116']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a4c3645-efba-457e-8044-b8f9580127e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.212.244.18']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b36b42-114c-422a-82f2-09193ecc6850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.221.176.60']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc4a9320-671e-4ed7-bc44-d344b586748b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.81.23.216']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ebb3557-e442-45f5-9d68-aedcb8c955fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.206.133']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb48690-57ce-4144-b8ec-713a28b4bebb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.102']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee42a13-568e-4857-b9e4-518bef9e411e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.107']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49f87287-f9ef-44fc-b63e-0317ab9fe67d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.125']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf0e728-420f-4621-a34e-beda37227878", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.126']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2887004-1a03-4802-98a9-ff657856525f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.128']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95183e5-24dd-4a1f-9211-dfc27c83af40", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.130']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--142055bd-7383-44c9-a7b6-77145de57fbc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.141']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61c6a4c-8d54-4890-afbf-2529b083682b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.150']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e326b8-4808-484f-98b2-6f3e4f317e59", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.151']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f741e3c-01b6-44e4-9f92-3c33167d2287", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.153']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd49454-bb88-4e9b-b74c-957d3c9c6abd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.155']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0777afec-642e-4278-85ac-c4d32a5b5e1b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.157']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0464c139-3266-4cee-b58a-cd0e802e6cab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.168']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a36e5f4d-8551-4612-a806-f51539e1e629", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.230']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d55f817e-5429-451f-be7b-675189a5fb20", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.31']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42db6e53-9f5f-4b4d-8d4c-07015c6338ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.54']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf9f026a-585e-4dc1-9dc6-7ba3df1f25ac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.6']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0364f2f5-0ca8-4e69-a735-f5285567bf08", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.63']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c2f083e-959c-4146-a460-569d515b57d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.64']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b19f3354-6966-4030-a47b-b90b2e0d7f6b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.86']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d7d49ff-0519-4a8d-a165-053494a0cafd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.87']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8738e590-f613-40fb-aa8d-13915eb9fc21", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.92']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41966c61-4030-4adc-9518-daaf4a5bcfcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.12']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--806808db-522f-4a35-8ae7-dc867d4491ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.14']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7175405c-869b-40f3-98ea-df8447af55c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.17']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4bfc10d-0826-4fd9-8bc8-8aa7b46de903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.18']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac34260e-d930-43f5-8362-79055ffe8d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.19']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc9bc610-6dc8-4b2a-918f-3138f7590113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.26']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--138c35bc-1f61-4755-bf92-050fc902e3bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.4']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56654b63-41d8-4650-8097-c3366759f760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.6']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac9a92d5-7523-4d94-9d42-69c2392b7b88", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.109.52.213']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9207e135-8264-4747-bfa2-2ced1b60313e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.109.9.180']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18461c75-2d5a-4fb5-8444-5adc45021c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.242.107']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a121bb-6309-45c3-96d1-db37ef718aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.243.125']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec97b5bd-842d-4c3f-9549-75306aa1c4ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.243.61']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7da2ce9-8a05-4868-8b02-68adfd821a89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.157']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50555c69-064c-4ac4-80e0-7f30dd2efa79", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.159.154.66']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c43fa2-994d-4d45-a804-85e8507d1e25", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.205.201.66']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bba9c2b-6403-49ad-b3ee-d220147c5aa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.209.8.82']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4668de8f-55a0-43ba-a01d-2217212a3ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.222.101.194']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e7f91b-c3ec-42cf-a628-e58b9b64fa1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.206.247']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98dae5f2-ac2e-489a-9dd8-3016766285da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.227.145']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee17f42-b612-46cb-84e0-0058cd62bec9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.87.169.91']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25018c3c-455a-4647-aab9-167513069992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.249']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c45b135-3b86-4940-8795-bcd71e9fa536", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.97.249.98']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ebab7c6-8d60-4d28-abf9-27ed48d2c06e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.185.59']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f77183e-6614-45c6-9da7-3a770cacd7b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.187.35']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae341ebc-676a-4696-a97d-031d5d2ddf1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.187.52']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef599095-215e-4e63-a19c-486020c6f615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.188.240']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270ae16e-cc62-47bb-8cda-cd66fdde1c6d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.13.84.84']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb86680-4e2b-4909-a0c9-78f0afffac6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.178.170.230']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2845573-f18c-47c1-93c5-17f92ea8e184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.206.8.121']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--291e0bc3-b57d-4750-8e67-0c712ff90aee", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.105.129.57']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed283c86-8ac6-4646-8c04-cd8e22ceeca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.180.105.241']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--571af96d-a5ca-43dd-bd64-26ca0b44677a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.221.196.103']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--894e221c-277e-4658-a0f9-e551379d5f6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.40.167.121']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--275eeaf6-2666-42b9-bc72-bb2f326d2d7f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.102.29.230']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--122e820f-36bf-41e8-9efe-4d22513f4592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.105.176']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b08f46-453f-464c-9954-0165f04a1429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.127.66']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628b5d46-d443-463b-8b33-6a476927eac7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.19.134.75']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ac1710-87c3-4751-85ee-55e394c588ee", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.227.148.27']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad005ee-20b7-4a31-bb30-c67382311c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.139.212.16']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a219aae-335a-4d48-a6dd-54f6095e7f3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.49']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5434ff11-d17f-4a5e-b270-bb8b4b10571b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.52']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74cf25f5-443e-40f9-aa0c-cbb469eba1f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.54']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1906bc7-6b18-4c88-9bd6-3455dd3dee9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.55']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68954375-c5d0-4062-b942-dbd2271b4c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.181.107.100']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007dfe2f-93a2-4770-b93e-e0e98f3b229e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.183.120.56']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d331ea24-e9dd-4239-9568-1f855d88201c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.202.225.39']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6af541-3c56-45e3-81ad-4221a6d1891a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.158']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f9ef17-55f2-43bd-ba78-fc94540c7fb4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.56']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a52a4d8-0b2f-44df-b7e6-1cf5ca342310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.66']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b06ec0a-62d6-4b48-bb3e-f2af11f2adff", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.230.127.104']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dbd6075-4e05-455b-b8e6-38d1af090f67", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.176.49']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a638483-699d-4aea-beab-d1be9fbd47d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.126.225.26']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1eb7df5-1ec2-47cd-80db-3076a7cd6575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.126.227.221']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--054c7804-ea14-4bcc-bb25-8cd488ffece3", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.147.121.167']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657f5ba0-d826-451c-ab21-23c5182f16ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.102']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fbdceb9-95e8-4667-91ef-c70780efa0b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.108']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df543cf-b77d-4141-a722-47794cb67c7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.120']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf40b1b1-b40d-473e-b3ab-404aa0855ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.122']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2cb0f18-2cbb-44eb-a31a-a1eb596d14e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.68']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62eec88e-d843-4750-adb7-990eab7df2a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.70']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480b944a-0a12-41dd-9c5a-b89304cf2d1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.72']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18afae7e-525a-47be-a50e-11610b3c80a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.75']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e158aba5-5d5b-4c77-a2dd-dd81bae15137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.84']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d721878-3a17-43b6-b25c-2ab13c3e7ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.90']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d523bde-2c6f-472c-9310-beaae457b212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.92']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f8a817-0c83-4e87-9836-e45f8385b6b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.10']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f500b15c-5e74-417a-8435-002c1877ab34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.20']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3360689b-c853-4a70-b8f2-ad7601ff6415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.30']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc2db655-e9a9-4fbc-aa5c-7c30d5cb2ba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.103']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--171650fd-61d4-460a-82de-de690ead9e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.116']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0351dca-32b5-4a35-9a38-514a4d5be8ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.119']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c257eb22-a715-4076-8f70-964432a5f4e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.120']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58847a7-b829-4a5a-af92-a9a9747b2135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.126']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ded4c874-9cd7-4b41-9642-bb7b753e3e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.130']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac66d0a0-e1f1-4c2f-a6ab-c9a31d417eca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.131']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a970849-e616-4aba-b083-b8b3e860559a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.134']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6fa4291-9857-4392-8296-b0d2380913c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.135']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60db1afd-b443-48b6-8150-947be4ea0299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.143']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--650e5025-5e6d-412a-a5f2-a770da6da312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.144']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3801bd23-38a6-4e76-bd83-c602e3034931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.145']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3867fef4-109a-4cb2-8d50-a8d8a45c0ff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.146']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17359c4f-b2b8-496e-b052-954fd0e9058d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.148']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--642a7525-705b-443d-9581-e429ad598a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.155']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c17659a3-834b-4470-8f46-78fec0d12774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.66']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e14521b6-a12f-40a8-bcce-d7eb5489e81c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.69']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efbf769f-737e-4154-a4ba-e9a5b41f45b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.71']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a470b8-a4da-4b30-aacd-b5630938e27d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.74']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b03fae68-41c1-4756-9d37-2802d3e88ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.76']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--164eba74-9672-499f-83b9-0a2f37319903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.78']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85415489-205e-427b-839d-04cab805ad9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.80']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041a5597-3236-4099-9fb6-99634006498c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.87']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f1655d5-67be-44cd-b43b-bd1ac50e8af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.88']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d98223c8-27f0-49e8-8601-bcfe5808aea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.89']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--593a362e-f48d-426d-a39d-0b39758de54d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.91']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44a986e0-20ba-44ae-92b0-76593ee00335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.92']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80fa07a2-8a35-4448-8a29-db5bfcebe876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.95']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb46693-21e6-45b3-91f1-22ab34bac9de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.97']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--055c1f3c-29a7-45de-8794-fa288c9f035b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.98']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c9e1e3-2de3-4f99-ab82-2291f8cd5f64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.59.16.45']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3926b83b-2f38-494b-9b3d-fa199c43dfb5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.128']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--839273ac-1e5c-4831-b7a7-44092cd1f595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.122']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc66b73f-780d-4ef8-926f-46945350ada5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.124']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fafca7c-dfe4-424e-b7a6-d7b33db8b51b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.218.249.122']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bbb8a2e-5177-4cf8-a1e3-f9fbd20f054b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.164.20.86']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f387e28-2376-4f24-9b7a-9c162dda717a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.56.205.79']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--317e9b2a-ac30-480f-8e7d-ea4d8e409714", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.92.22.134']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad29516-e6a5-4c55-8d45-d5ce700c87ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.151.182.56']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a52a50f-edbe-470c-bc8b-f980be21f0cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.132.100.78']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a15425-c171-43ee-b4d1-e7a6b4fc129b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.157']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--509f9de3-312b-4f09-8dd0-0888c2f226eb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.168']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bcd08ff-63cd-4399-b96c-8a48e19faede", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.178']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--704c3357-d953-43a6-b1ff-9693cbb607f5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.81']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75bee50a-02c9-483b-b44a-7c67519823ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.250.52.89']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f2e0ea3-5c99-40ca-8e6c-c2971df9b055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.10.187.253']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e637b5e-bb16-40f3-8031-3d8aed84b272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.133.9.25']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f50b013-174b-409f-9224-9fa44bda8070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.2.109.198']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2aac760-c476-467c-8235-ba6c35a11d97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.208.113.114']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5928ae0-b384-4138-9992-6cd66c583c31", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.225.32.16']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a26f34aa-d72d-428f-8650-a7f44a8d8ad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.235.196.79']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f2700c-8509-4384-a624-d43b47b87ae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.235.196.84']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2048822f-f37d-4c11-8461-66a05f0b2343", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.109.205.160']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a01c0f8-69dd-4679-92e0-ec32ed96baf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.118.160.173']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5d9702-02ef-448b-a32a-abebbfbfe0ab", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.127.63.213']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a83cc3-d903-45c8-9e47-f9025b05c22b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.186.42.147']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea96eb61-a6db-443a-b273-1ce090cc7117", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.86.13.5']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5138c9-e260-4ee7-9b7a-ac97a8a7e2c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.68.7.235']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d29f4563-8bd4-485b-bd1d-e9c56d342ef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.85.251.55']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4331f38-c79e-4319-b433-52abf8eca0a8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.85.251.61']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b50b5ca2-15ab-499c-9f2e-c149d5db2f99", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.105.36.22']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f655b4-d492-4c62-bcd8-0a702a891371", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.153.72.82']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2309b46-ee1f-4929-99ec-31e3e2b36cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.4.211']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--788ffe6e-36c7-43ba-baf5-1d7ffb8dd199", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.254.226.10']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd667f0-f592-47ad-959b-371ea7a65b01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.179']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee1450a-c49a-4019-909c-977b72badad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.206']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61263cac-e9ba-47db-b32e-49cdff072d07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.189.218']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b179dd-fefc-4ebd-9251-ded6ab15b578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.84.83']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cec8094-b7e6-4943-bd0b-b6d7b4e2cccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.163.114.60']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f21dc153-447d-4649-8b78-caf27d39e7f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.96.222']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd1edd4f-fa46-475c-b1bb-447d1c665f99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.98.33']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00883a6e-eeb6-4d3d-88dd-4ac58314b5d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.24.105.190']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--197b816b-5b51-4c49-9ea1-c6412932b18a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.43.182']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7333713e-bf86-4d57-9555-93e62249d29a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.45.38']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--179467ab-9caf-48d7-94b7-cae6a6f24940", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.6.164']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad6bac15-6312-4dc6-a5fd-23a50fc8effb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.7.132']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a73a91-819a-4dbd-be52-e8b81fce8e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.24.55']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc22b78-d545-48a0-923b-4f07d3162f38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.142.170.60']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac75207-83a8-4daa-a2d8-6a256b6b8ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.143.110.149']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27ed7ccb-7862-4b22-86de-f551b77ed8de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.143.210.136']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ffed5a5-614a-4998-b9d6-932d0dd8c43b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.143.213.209']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef20e32-4773-47c4-b5cf-ced35ae856cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.144.18.173']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--833be80e-4141-493f-8190-2c16af20480b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.149.238.55']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecadff8c-caf2-4528-ac05-a217237be906", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.213.16.195']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc744208-1f8a-48e4-a1c0-ad24d434e9d5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.230.250.150']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--497519b1-d3fe-4aed-af87-984e45fcbffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.74.234.166']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b780825a-d70f-4806-8ea7-b0000340e765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.245.221']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec9de8f-c1b3-41f2-bf7d-932ab6a24719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.102']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--061f7629-cfad-483f-9396-363244677bc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.106']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--295858fd-faba-4c7f-93b0-ccfd256fce89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.111']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92310283-e26d-4427-ad2a-026e55d1387c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.114']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a52b3322-b7b0-495e-9021-4290671398d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.126']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5803f1ec-fc6c-458d-997c-0f6114964518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.80']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2519cd0b-e5a2-4fe4-85b3-864dbf7f3603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.72.3']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb604d10-d19e-439c-af5f-ecfa02be3f5c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.220.88.107']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8623469b-a675-481c-9075-4445e875bfeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.184.158']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--377aa83e-f602-4227-9ea8-30c5338c33a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.184.185']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040427fa-0dbf-4546-aae5-a5d41fb3f762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.125']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef3c039d-90b6-4799-acb2-e228cc37c3d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.211']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b64e2d1-4b3a-4d51-8460-dcbbf614679d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.218']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8033b379-12e0-4d52-9ebf-324eab956136", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.229']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83747acd-c1ab-4387-9408-9f0adea700ad", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.63.117']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb25634-a989-4387-af8e-60575dd0f0fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.118.33']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b8dd2db-b526-4142-876a-2c596f4bb3e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.101.183.11']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f886622c-0ac0-46a3-a685-0ea7de054607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.106.8.103']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb50a960-0d4f-4224-94ec-34ba69631dba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.118.27.110']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb9d78f7-5947-4d76-bc82-d7d7ce1558bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.127.65.138']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f851fe14-131e-4a2f-aaa3-6f9aba1e1427", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.134.11.116']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938dbad1-6012-4a47-ac7a-b938f079ab27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.2.63']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4db0e67-c1b0-49ab-b024-b7f4c3634470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.82.238']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c86ef5b1-42e1-45f3-be3f-227a6d297788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.129.51']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4079945-f20e-4b3c-a7d4-04da9537ed0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.175.187']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e68fb9a6-5fdb-4109-8f64-ac0c8b5f91b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.147.197.17']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d12d9a2d-4f37-43d4-8826-64edb3ccf578", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.147.71.207']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b32cb64-1dd9-4f1a-b66e-796023e83d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.150.63.157']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c5c47b-9abc-4e1a-9954-693646373ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.199.213']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caad2a78-1662-4970-9fe0-1b9c0a34f7ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.31.244']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e97bc2-ac55-44b1-834e-bc100a769604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.43.118']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4764d7-2f59-4d38-9e8e-405f28fc1bb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.48.231']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a59c4e-25b6-429b-a256-3106156f37fa", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.52.172']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3892f56c-b1a0-4bd8-b18b-a291233a3121", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.178.212.141']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5751c6af-4f4d-416f-a902-466dfb5438a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.197.70.90']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11577159-1d5c-4236-af86-85d38b5a066e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.20.177.132']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--282bed44-c496-472f-af93-8cf98d4378d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.123.7']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed3e1d68-87b7-434b-a86a-dd3376411e2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.175.240']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a69897-c7f1-4fe9-9bae-f0ac8145b148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.104.231']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2642c271-a67f-432b-9804-9500083ec4a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.143.207']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b6485b8-2f4e-4352-ac2c-47cfd225b998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.153.161']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3f3ff41-ff58-4a84-9b7a-c214141a4f84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.40.28.70']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f0152cc-ae6d-48a6-bc13-2bdc48ecf5ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.198.191']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb437bad-02ec-412a-9afb-1fb2b2616b76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.228.51']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd746312-8758-43e2-9d61-a276ea3d866e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.144.112']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ae78c7-f1dd-43b2-9912-d951db86ba4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.100.72']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6415704e-f06d-43af-ba72-357be84f5421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.229.221']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9260def3-ee3b-4b6f-8b7c-064d211a74fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.3.250']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7591c458-7107-46cd-8e7a-16cda3a1e76a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.5.27']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bdf5786-e00f-4e69-8853-463655d52341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.66.100']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c4019ab-7bca-408b-8ecc-5f61edaa8117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.69.73']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--184ebb00-93f4-44a7-8abc-78eea207b037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.98.27']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3774e8fd-e67a-439a-a902-057ac1a31861", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.67.93.253']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ce8a02-f9d9-409b-9300-3854486552e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.176.200']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c2bcbb-5216-4e1f-a934-ca35e9eaaac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.251.39']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca48b8cb-616e-416d-a726-86996301dd6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.119.84']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72175124-9b5f-434f-8ae2-02aeb988711e", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.217.12']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5f05bc-b862-441f-a277-d1006f943edd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.100.22']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c0065ae-407a-42f7-b29f-a6d70335ecd8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.188.167']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53468cb6-3f64-40b6-b77e-96cf2be8b36e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.177.120']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48448fce-4dd7-4b0b-8007-735ca6e7eaa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.222.13']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab40001-7abf-407e-9cce-9a8923e3c118", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.86.159.182']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feeac26f-d2f5-45eb-b5ff-51544c9041d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.87.218.152']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94662542-7125-4b0e-8f51-5a0dafa2e7f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.89.92.173']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d88af9d4-55f2-441e-ad71-59a76976a7d3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.168.200.72']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84deca56-4dd0-4cfe-a60a-f81b2a52a632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.169.206.177']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b30c813-acdf-4212-89d8-15355821b05f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.24.24']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd5d5edc-219f-4b6d-ae19-358fcee51ea5", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.33.81']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bba742b-0da4-43c1-ac7c-50088c23cf0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.189.229.194']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96080f3f-dd83-4406-b483-1f4e62ea61db", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.193.165']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--784b1e88-875c-4343-ab59-659304653237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.26.166']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7696782-9b96-4879-bfe4-516119b3f8b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.43.18']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e39660-1945-440e-9576-c384cec78c94", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.84.127']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f7e6e0f-eb3b-4b3d-a671-67946367c4b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.202.9.133']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32d58c8f-fd86-49fe-838a-cb4378e07b6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.10']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e25ad928-6c53-4294-9ec6-4da1ed014552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.102']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a0154c-feb1-4774-a3b7-a14c226ea4b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.107']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--155bb794-e456-44ca-98da-5d375f640dc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.108']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1883b60-d447-44e5-89c9-0c4034032dcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.113']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19bfc91d-f470-42da-ad0c-b0383a462f96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.119']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2633528-4ff8-4cba-9221-e173bfe11427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.12']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e95722b1-2ee7-455e-8da1-a8d04f5b5d0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.121']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c7abfdf-bd2b-46a2-b963-e2beb932abb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.123']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe242cf-e43a-4593-a59b-c8fe3c206774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.125']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58fe28a5-c9c2-401b-ad15-a38bc858f34d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.126']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38e9e301-b586-4e14-a0bb-742d7d3c3de7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.129']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b93156-5b04-47b6-a009-9f7aa80bf9f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.134']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa6281a-8aa2-423b-90f2-483b5196ddaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.135']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17562d2d-87ef-4642-a9ec-2d3940eca8b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.141']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aee4002b-1882-4165-a7a9-2776bad99d3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.144']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67034843-8612-46ea-a88b-fb7f19863713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.150']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--507a635f-b70b-4700-b6bc-faa8139c2f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.152']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aa03430-0f37-4164-8fa3-2ebd476003c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.155']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c13841-63f8-4099-98f8-ae16ce035b2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.160']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57fd2d84-bed5-44ee-95f7-4c35a3ff7a02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.164']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc646a06-3158-42a9-ab94-24001e41bda8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.166']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f91791bb-d76a-4cc8-b575-0dd7d668839a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.170']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36d9b55e-b791-4163-9288-b343254d6840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.171']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--061b04c3-0d40-4302-aa6c-6b44db44da8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.173']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e349379-109f-4e6b-821a-5417c57298d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.187']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a28a3f3-37d3-4278-b87d-49cb8fdab9af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.188']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3c6953-8a90-418b-8124-0ff94b72fc42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.189']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043a83fa-b3e7-4a61-a508-dffa3a50e602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.190']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27ee70a6-69a9-439e-8102-d22c2e27d4d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.193']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95f50b6-052c-4b0b-9c79-125569225c6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.196']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f81dda-bb77-42c1-aa5e-349f98133060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.204']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1101434f-7f05-424d-be11-3fbb4e4692a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.207']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f81a8f-f59b-4dbd-a33a-b739bf72bcd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.21']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09825423-f520-4e36-b2c0-96e1e5e82de6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.215']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7082e21-45ab-4984-94bf-23d152e32b1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.220']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b9b3f71-c573-4a4b-bfe2-02b5f640041d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.226']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca28a14-9991-4a16-b937-5d6c8c950129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.230']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb36b27-df01-4f94-bb17-1b42b2fb23b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.244']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e001d391-f5e0-40ad-8b44-e78ceeaf55e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.25']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91047ff3-6700-42f0-8743-e6c4411e5f16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.250']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62aa90e4-9286-4bb8-a25b-194e82ea495d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.251']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a59ed5c7-edb6-41ab-a076-6fa840407b43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.253']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98970f39-6207-4b39-b05e-fb4c32f879ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.27']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec7e5dc3-449a-49be-afb8-9bdff71c218b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.31']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de4230ae-06bb-42e0-b309-a294f1c1a509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.33']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d626435-4c7e-4cfd-829c-24c960861929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.34']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--093fde6e-6c11-4493-88ad-b1229fd75d92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.39']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a6f4f54-b700-4e0d-84d1-683aecc96afa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.4']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15666573-2b76-4520-9a2e-3896db4aa0b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.45']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f2c46f-8583-4246-aab8-466042b596c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.46']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--351fe28f-2df7-4809-af05-7c2c8d15cd3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.50']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e5f400-9f98-4be6-9c3d-42c1cbeb8ddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.53']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f2ea64e-f909-4c71-9bc4-9afd161444c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.59']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f93e115e-6fcb-4c8f-b598-f9732604b976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.61']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a274fc-9260-4424-9c08-593f261dd2da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.68']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60a52cbb-7b3c-4434-8139-e199997e0b92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.70']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9175248-a025-4c99-b174-664bce7255b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.71']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66eecbc7-7029-42c6-85d6-ec88e6289f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.74']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ec6c3c-395f-4e94-bf8a-581fa6567020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.75']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75cba11e-02b5-4aae-830a-a65017907c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.76']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece11d11-0acb-4674-a9cb-afc7856c196a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.77']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a445fb40-4544-4545-bc42-95640d2c948a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.79']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8da5db3c-9541-4c8f-ac48-68dca7bbdb18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.82']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d800ac-7116-402e-9e48-357f8afc1f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.84']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf5d6c0b-700a-4317-b386-69655c4f8661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.89']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b144a2cf-bc9e-4031-94da-390ba302e8d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.96']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc860a45-9ab4-4f46-afa1-776b1f3f71f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.97']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee282d2-9765-477e-8005-17eca31837a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.99']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0131a6c4-1216-419e-bb91-cd81d58fa321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.101']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ca3a63-8534-4ac0-b2c6-3ca1e3bd723a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.107']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--587085c6-30c4-412b-b29e-7903ea191ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.11']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e0854d-7d4b-4dae-828c-c530ed6f1760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.111']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6fc940f-a2bd-432a-a0dc-5fb12ac773a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.112']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d38cca0f-cb78-4c14-a4d2-706be98277fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.126']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd23670e-ead6-4b4b-a3d9-1f5424e15f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.128']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5b06e2-3d04-48aa-a63f-c266db632e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.132']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8e30b21-0cdf-469c-a20d-0d9c1f9e8b13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.139']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--579dc745-70a2-4991-ba70-f15caabcae07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.142']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a50d6c94-1781-4b3e-80e8-87d7f7da235d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.143']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc732ed3-aeb6-4c23-81c8-c057d8b6434a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.144']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cbab7e5-4940-4c7f-95a3-8031d7514abd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.153']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f50bb6-73c1-40be-a201-45d1fd0869c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.154']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2201bcbd-6c2a-4b8f-acda-13e7879ea5fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.158']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9aa4a12-78e9-4a69-a401-9a32040b6c26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.160']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20789889-4345-4230-aaf2-0bec9b6f3f96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.163']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c615c9-c969-4df7-91df-25ab9b0196d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.165']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79996807-9803-4491-b27a-94c8e3101ded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.173']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b20303e-2861-446b-8e15-26b870e481f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.174']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9460cbdd-d82f-469b-94ec-89daaedb67d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.18']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e9fc87c-e588-4019-87f5-b36ce4a1fb8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.182']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef0ed21-454b-417d-b033-e1fdccc24593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.183']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac98eafc-a801-4d63-a77b-2faf1a49ee16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.185']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bcc6c5e-b02d-4fcd-85d5-83474a7a877a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.190']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54621ab2-86b6-452a-a75c-812e5b47706c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.197']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dea238e-7fdd-40e5-8de5-10f7facfa547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.198']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f9b171-27d5-4315-be41-ebc80b43bd60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.200']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a0c2b9-1ff5-4253-9498-147656977d69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.201']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8fa5917-0261-4649-97e7-86b66ddfcf01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.204']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e5ec9b-622b-4cbb-b140-bfbb967534cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.210']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70116f77-6bdf-498f-ae2b-3bbb4a31c5a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.211']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86320789-7360-4c42-940f-8a12a7ccd6a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.212']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c51fce20-9fae-413c-be06-5f47c6fe7fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.219']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1fea80-dfeb-4159-937d-f87154746da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.22']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe5c325-b0c9-45c4-8c52-788f71c805d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.222']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b98de25-74f4-4a0e-8920-294316436ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.225']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--156d477f-88ce-48bc-b8de-61541eb032ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.228']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b31bc9ca-0f32-4e46-96fc-b4c21cad30e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.230']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1080a2c3-6482-4dd4-9cd1-dba4e350b72c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.231']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a359427-c21b-42cd-97ce-353f21ba807b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.234']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--334e7d93-a3f7-4b84-ac1b-eb18ad8835a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.235']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26108108-a41c-4215-a40f-cbb5045b12d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.239']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7753c9e2-c7cc-40e8-b9e4-168e5b84e35f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.240']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af744991-6b45-43ae-ab78-5dba3dd3ec6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.243']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd112477-3ed3-4016-9d58-3b2de3bcf7af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.246']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf76a62-c3c0-4b9f-aa22-3d02cc618430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.248']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0850a5e3-1fb3-4596-bca5-11fad65132d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.249']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f626bab9-62c9-48c5-a543-e251210cf19e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.25']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b343c6be-5fc1-4119-acc2-707c12b39ee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.250']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff08e9d4-d3df-4e6b-bd45-042e19e7bd78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.252']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02247e4d-502c-4824-93db-39c0efde4d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.30']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27676b18-ce22-4f90-b094-7e44e62698d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.33']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c039a80b-64b1-4c67-ad44-c5fa73d530a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.35']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117f3651-281d-4794-a05f-2066258b5ebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.38']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e2c2a13-4355-4913-91ab-37890db0ee0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.44']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3667dd2-76f6-40da-970d-26689742803e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.46']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e74e0898-e8e6-4024-b7de-b66c272c7f8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.47']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a27efe-91b3-40bb-9d4a-f60995705b14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.52']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--265558d1-7d11-4e3b-b095-c50c67acccfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.55']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8782f66-5831-4683-b31f-11be6319ad8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.56']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752e2bff-64ff-4013-b024-cac4260e279a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.59']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2145f9d9-becc-4305-b4bc-f7ff46d70f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.6']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b292857f-ecd5-4681-9503-29ecd6cb3528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.63']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2934b98e-df55-4aca-aade-98a7540d8925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.65']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3199c9b9-3deb-4f08-b071-4c86c6055ba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.73']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f71b7db-a719-4bae-81cf-381552e4fa32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.74']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--335ea6fc-f915-4e2b-8639-4684566ac1b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.77']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a06e69-8dd4-4a75-88d8-3fd79f9f0ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.8']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c72cab9b-fde4-48db-b5ae-db9bf902a295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.85']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e19bd708-8410-45e4-bbb0-6a5bc1948e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.86']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca291fe8-61b6-45b0-abf0-852e115ad330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.87']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a052e43b-d99d-4ffc-a0d5-13916667d752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.9']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--109765ba-0f93-4c7e-ad4a-be2d165c6685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.97']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f8289ff-61fd-4f4e-9bc9-6009fb1f49f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.125.103']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10708d54-8137-460b-a346-77b34bb86434", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.223.75']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e7a3e3b-cc72-432b-a291-f577b4c77696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.89.54']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce2489b5-adbe-4dd7-9313-038dac742d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.144.195']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de002625-9e1e-40d5-bb88-76eab206fadf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.172.131']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6864939-3b6c-4080-87f3-1b16a9df6c0a", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.254.237']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4251a5c-9ee2-4103-bacb-900449190c63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.221.180.206']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513c3f51-0b12-4674-ac6d-f493efb1332f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.223.55.246']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a81da991-5276-441e-a150-4939c23539b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.110.202']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca292c7-dce6-432c-99ec-4b586941f68a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.84.13']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--401e5a24-0e5a-488f-b600-67f6b820f2d5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.255.253.186']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--158db7fa-41a6-4053-8e81-eaff1c1abf46", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.134.69.15']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa85ae9-64ef-4616-9ad6-6891e7df0189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.27.167.79']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38966284-1f83-4c81-b1cd-812920d8cd3e", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.75.0.49']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2392eea-c11a-469d-a3ff-2dbfc8bab76c", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.77.166.106']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fbf0d41-c49c-4fb9-b9bf-67635b55faf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.91.171.37']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a9897bb-45d8-4236-a149-3d5f0f3c4b14", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.93.249.106']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec5a7c6-c90c-4357-9177-c2a7a72c41a6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.95.221.140']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--919224b3-6192-4846-b722-627b08dd4ad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.150.67']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a4dca3-76b9-4c33-bb1e-bbd1740bec6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.137.249.117']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e75cf92-b397-4177-9cc0-3a53530b4b89", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.253.239.21']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee76ec81-3d14-4804-a415-9ee0958d7209", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.61.134.133']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--621a0232-f283-404e-983c-8d4236b9e43c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.76.163.104']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c312d02-8cf2-4ee7-9898-6aa4db611aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.76.212.178']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf3f1ae-ebcd-420a-b4c6-3c30dd936fab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.96.178.220']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c48a0068-83ed-4d72-b84f-8609bf072bf1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.104.86.159']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d28da27-672e-44a4-8e2b-540d241df339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.130.240.253']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4f58cc-2713-49bf-a816-d2f349c362f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.78.139.120']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a36b5d5d-4dd1-4d9b-a526-8736202ff76b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.96.159.29']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca50744-d654-41a4-9f71-ba81f10db5aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.96.195.130']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a316d3d8-4456-469b-bbec-ddef46d64437", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.150.201.26']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6b690b0-3fe7-4f29-a5d6-15a9dacc4b5b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.194.4.255']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242e1770-e9e0-49dd-a6c3-a24eec8bf140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.178.199']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9ece3e-9bd6-4435-8894-2ecfc4e77e01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.236.159.149']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98db578e-615d-443e-937f-17779fe4a359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.26.30']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e03c4549-ff16-47f0-85ae-fcf82c169abe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.40.156']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3baae9ec-2030-45af-a276-9caa9079206c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.43.133']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5383f6d-d2be-43f8-8ab4-6e737eef614a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.116.246']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7025048-a89c-4d46-b7ae-1c74fcdc7c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.168.253']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ef99d0-e87c-4263-8813-585361f0f98e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.170.45']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d27f86ee-4039-4dc0-90e2-2a1a0a4e513d", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.171.173']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91316803-eb66-43f3-8978-35b960023106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.172.100']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87a9891b-3f36-4352-9a8f-dbd852c8bc5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.172.38']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae6365b2-e3b5-4e6b-89e9-06503f34d80f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.31']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccfcdbb7-6dec-4d76-9162-c102bb7ff870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.184']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb1108a-3863-4f36-bc22-3d6d9d685afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.251']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0896e5a3-8533-48d3-bd1e-347e13c3775b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.75']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea6cb01-e3e6-4de4-a392-6318114a788a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.179.252']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd55fe89-4759-48f9-8fe7-ca7d4dfad68b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.184.27']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5550dbd7-9cc5-46af-a3d6-07fc2ef60c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.156']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def4b5bb-22c8-4c90-abd6-747f58fbbe1a", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.80.149']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f5df6b5-026b-4339-96e9-9277dbe98cbd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.65.222.177']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5b1afe-24d1-49d5-a6c8-eb19253b2493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.161.178']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abbcb265-85fd-462c-8fc2-0c9c6e76e4cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.177.206']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80617edb-c465-4b19-af88-53526d341078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.74.212.73']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cea17cc3-163b-4d47-8ded-5f598753175b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.117.240']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b737e253-b043-4c8e-886d-35e109d7fe71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.99.43']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e754b71-6da3-4c8b-90dd-9159a095a662", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.12']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75b8cd3-5399-4fe3-88b4-4e6dbae476df", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.121']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f16e50c3-cce4-4068-8c7f-b805daee2e7e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.13']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e820d6-57d1-446b-8fe1-01ef86312947", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.132']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f99768c-d502-4274-90f8-56ff7d9d2d2c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.151']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dbe2f91-df6b-4c47-83af-811b084a539f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.154']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2cbc98f-048f-4c4d-828b-1740fb666dca", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.158']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--039f0331-90e4-4310-9958-1f1a7f875ccd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.20']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be12ed7c-e9ca-4bfb-a0e3-3c91c0d7bedd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.24']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec88cd8e-e057-4eaf-a370-0c3041dd1f3e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.255']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--386c6f3f-32d0-4f66-8c38-4a39e07359f5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.3']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--966c8553-a51b-4027-a767-2b30efabbb63", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.32']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0697f2e8-04ac-4877-aca1-ead100090f7e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.42']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74830856-2ad7-4e03-96be-05172520f829", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.45']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e800a71-9d2a-4f1a-90eb-0c0f7c1ec77b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.48']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--551f497e-8372-48a6-9e6d-ff3edf8f2bf7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.49']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d23248c-06ec-47bc-8290-d2605f574d9b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.52']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2683a17-1040-49c5-bbdf-3e38707a23dd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.6']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a377a77-7301-4926-a2d4-09d8d9ead128", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.61']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20db8600-445b-4f62-9f87-cb859087858a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.71']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a34dbdec-faa5-4190-b7b5-0e4dee1e2e4c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.75']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb377601-72c9-453d-857c-dd9fb90964c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.201.49']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a69c4b67-2139-418c-bd24-a3143da4dd7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.90.235.65']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--510a216f-5f3e-4a4d-81f0-bc8eeb214096", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.191.229.226']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--702d16a3-5f33-4cd4-85a5-086764c54eff", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.210.131.212']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ec8f3e-8396-42a1-8862-85e3f6583e93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.32.37.193']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--027264ab-2d21-47f6-942b-f5f1a2203e27", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.76.110.73']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e3779ce-242a-4b64-a74d-a1274276f1ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.1.65.162']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d46ba68-6fd2-47b8-8aca-896b48d356c5", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.100.22.49']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f55c250f-2070-4c94-ae7e-48299400fe72", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.100.24.239']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f56d47d4-1e9d-4629-83cc-7f1827940136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.100.27.133']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a91061-59fe-4b0e-aaec-e2c27f96186d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.100.58.23']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--624ec57d-ce5d-4a17-9f27-37339fa0015e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.100.59.251']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d0247c1-16e8-4c07-b758-3860c0da619f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.54.201.229']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32f25440-7301-4149-aff3-7d86d926c608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.83.147.32']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a80736f4-07cf-4100-bb62-84ac747eb153", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.244.36']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa51ba7-eb8f-4d47-93e5-ccceb560c310", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.31.17']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb70a18-5443-442f-9c39-07c648dba3d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.111.60']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f25eaa5-dd8e-40b2-b26e-8f393b962cc3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.63.61']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d681059-ce2a-49f9-8361-46f4afd0fb20", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.144.126']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd230d8-a960-4ff1-9ad4-348857c51232", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.145.73']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92f43373-d52a-4e59-a74f-f1744cb9af30", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.136.110.113']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7473e2f7-1ac7-44cb-8357-9c9b13ab3e49", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.147.3']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b60cc6bd-4ea1-4f04-ad29-ec8506dfd3fd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.150.69']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a8db2c-90bc-4701-a01f-e5d9c2958e62", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.175.122']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a67c4ed-8a25-4729-9cf0-59e9f13a956a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.22.109']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6febaf47-6532-4ed1-b19c-10cdce0fa2b9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.135.203']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--362cbd8f-39e1-455b-8b0b-51b2997a098d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.161.217.205']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--632446f8-2647-4636-8a2c-1b0a400d46d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.162.103.165']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13135763-0b82-4cf0-81f4-79ecec1e726f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.133.138']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e635f9-013c-4b01-9352-3de3568290bb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.195.69']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b57b47fe-bde3-47f2-9a4e-1f2b2df1d049", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.126.130']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--429755a1-abf8-49b7-b120-dcf0c3b5f9aa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.174.53']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51207a25-c62c-4aae-882c-38e2c1cfe96e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.186.188']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c951427a-3a4f-414a-8d9e-e826dea99658", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.132.142']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--450e76eb-d299-47ff-924e-c83dc2021f83", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.137.151']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8961a10-77b7-4bec-9ed7-d25b1f5753bc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.157.80']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56e9c6d2-0c06-4506-8de0-83dd9574e0c4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.115']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90733ce3-189a-4ae5-9a5e-8921223d9fac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.177']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc9a36b0-25ee-49ef-bca4-159af3d4e4b6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.171']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--992dce87-32b7-4fb4-989f-291ed5a3f666", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.238']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0d59f7-a830-45f2-b70e-20020d42c09a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.228']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ffad35f-0fb3-48e0-8c40-d8997ce94e9b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.41']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf98d270-a949-4631-9d3e-851b0ac693aa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.77']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c510f0-3321-4ed8-bc77-2b7ddf6237c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.10']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3a4d7f-ad89-47c4-8dec-3ee3e59a9cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.6']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9174bb44-bf2e-417c-a891-6e910cd59656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.8']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77df95e1-d785-4e92-99a3-3b533d76fb4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.9']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b689994-e057-42ee-b132-61f0689a3b80", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.141.14']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afbdebfa-16b2-4c69-b3eb-75a137727e9c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.252.230.112']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bcec044-79b2-437e-8c31-ea010fb15c41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.220.185.22']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b6606d1-1189-40e5-9268-e04cc015ea58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.112.149.170']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--156f0e9f-cf4c-4da5-833d-7dfc34fab7c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.120.126.66']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ccdc13-43c3-4d80-9162-7fcf7fc97bb7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.127.5.35']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5dce30b-45e5-4d32-ab6e-714bedd1b3f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.129.242.47']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a3fbd70-09be-479a-95c9-6104d466a72a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.193.206']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f69a5f61-b9db-404c-8e0c-aa6fc3568d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.193']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2414972f-63c6-46bb-a7d2-c0921fa28f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.113']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5157be6-9d91-4a7a-94d3-33d38e982d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.83']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00cd2b90-757a-4691-9124-552b8129dc12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.233.69']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e87b3441-f5c3-44d1-b22d-c218c5089c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.10']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f7bf96d-5f44-4400-b8fd-e20e50e65e64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.87']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b850d0-1d3e-4d21-9a62-d279a510144f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.96']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ecfa4ff-67c0-4d79-b428-2da5d40eda15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.98']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a25d9807-421e-4290-b684-0173b9e33bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.99']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1e5329b-402b-405c-9726-b61f1042b18f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.10']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d22171-22c0-44bc-a323-015670912c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.12']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e606024d-de3b-45e2-acfa-2c2a12863364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.161']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--648855dd-41a4-4e3e-b54d-3883adefd66f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.164']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32845a74-275b-4de1-a7eb-cf0d4b277b74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.166']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c503ef04-de76-4c12-8954-f4d44b218f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.169']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d27e9f-3288-4d73-844c-013ca35128e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.177']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed678a1-7fc3-490c-a4e6-5e700a214395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.33']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--544528fb-b8d2-4334-9504-d18f64f5c6f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.35']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d9e1ff3-2bb2-4104-8d17-f0f1e2d60721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.53']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d42552ea-e5e2-4e7b-9ae5-854a21590ee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.8']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5280d02-3a84-4dc9-ba9c-2714a25fe3ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.9']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90c09fcb-3513-4e37-b1ab-9779a6d13a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.90']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d219a15b-8a9f-4384-bebd-530bb6c0ad0e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.147.249.81']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb147bae-227f-4b4d-9bc5-1186b2ed1a11", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.121']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56c4e3c8-9738-4568-a71f-29d47cdc5587", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.141']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4cb48c0-18e5-4e55-88f9-2730b90358ff", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.147']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f382de1a-6d2f-4c5e-bd32-58555e277b0f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.151']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f31866bc-e2af-45b1-a80d-bce4e0a9fb5c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.152']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--594a94ae-bf16-4b2b-8287-c5f5d5c7ef14", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.157']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3776d9ef-65c8-4535-ab12-bd2a0d2154a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.200']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e82ae7af-d709-4bfc-ab5a-c6e4fb5b5e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.230']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a8a0937-3e5a-4fb1-ad93-83341640b70e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.67']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--063fb022-cff4-4b5e-860f-0722e4b34a12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.146.52']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e36118-08f9-4271-bebc-fdbdfd0a5d01", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.152.66.113']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba91ecef-b72e-4c83-85c5-e44369aad373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.18']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c57bb391-dd1e-4268-98ba-042235f3e96b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.32']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84433786-9c78-4c8a-8f37-f5bbe0c28d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.87']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f40f50-afb9-42f3-a49b-3a1dd0563885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.166']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c14c820d-e069-48ff-bdf3-131709557444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.168']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7373267f-0290-4f31-ab41-611c0b5bdf70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.173']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df201aff-3c6e-45f0-ac74-228a9d5ef7e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.52']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc6a3b5a-f6ff-4a37-ba7c-26537105d86d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.54']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f1388d-6113-43c8-892a-ab9ab5b5d914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.62']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5226cc7-fd94-4b09-98e9-3a4ed9d3e7e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.72']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052a0b37-e49e-4797-8548-83b2ff642823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.152']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b29548c-ce8c-4add-8529-c1b629439e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.76']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3748d554-5f40-4059-87b5-25b2250091e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.77']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ed0dc8-10e9-4570-bc3f-bfb7771d42ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.91']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--199d36dc-0776-4df5-9592-a467c4eaaacf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.95']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6dd3c46-d270-4fca-ad46-317aded19e50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.127']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c1aeb9-ec4b-4764-9919-2bfff6a57d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.7']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92452023-baa2-4d7a-a30f-70851dbbca74", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.174.162.68']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a511faa0-f05d-4410-8046-fe92efa92601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.175.123.254']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a88e59f6-9232-4bde-a972-9f3e08ead059", "name": "Malicious Host", "description": "Observed: MSSQL, MYSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.179.153.26']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3509573-24b3-4dbd-acc7-28a5aa88f15e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.192.184.50']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf1bb25-148e-43f0-a3b1-11b399752766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.248']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32abd9a-8b0d-44f2-9a80-355b561cd466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.249']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff80bb68-8f62-4c8f-9c37-3d11867b9dd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.251']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ea1650-5c4c-4ed5-9c6c-3f02e1fafaa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.252']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6db995c1-62ba-4209-beda-65855a3be1ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.253']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e8e665f-8e08-4568-9b47-5131fc003910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.254']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde046f5-9761-420b-b301-6a49db8c0e9e", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.195.250.117']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb2f47f7-82a6-43ff-977a-c33cff0dc14c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.126']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e1c866-46a2-46be-b994-4d88feb8d95c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.127']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--259a6f01-1721-490a-861e-969aef5839ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.145']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89536bbc-8586-4611-8638-dffc96584afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.18']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e16da83-2d93-40bd-988a-1c77027dd736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.22']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a1ad158-b43e-4a35-8e15-a966d74db82f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.5']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40537435-f28e-4df9-a303-5fa665271d5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.85']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d70cac0-5ae8-4014-a6d4-29bc55312299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.5']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd93e3f3-ce6a-4a71-8cbb-22da84aae73f", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.226.127.198']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f376939f-634c-4d6c-bc6b-e3a285001793", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.170']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7cf11d-ff1a-4d5a-a2ef-fa53f32e4653", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.27.180']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2458e1-1ece-4b94-a834-658f1443b192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.244.136']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6624e910-4456-495e-81df-74d291eb94af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.196']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be65b8b-497a-4c95-8ce7-135d205caba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.182']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b59f0e2a-aa96-45d8-878f-457a8592eff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.76']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd11f40-3191-4d30-9279-f171f551d6ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.10']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7c08a44-c8f7-423f-8c0f-c30447aea3d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.8']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29abd4c6-6a5c-43eb-95ad-7bdd225e3fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.110.79']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d5b0231-1136-472a-ad50-5384cf73961e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.14.197']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a261cb-92df-4b67-874f-793472602ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.14.5']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af825dbf-cdc4-4bbf-8463-9cf1cc088e92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.40.18']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a830c7ce-d02a-4ca3-a430-cb15faf4a33c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.41.118']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df43efe-1e14-488b-86bd-a9922ace3e17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.42.25']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b431d9e8-ec1e-432d-80ea-4530791bf8b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.52.85']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fda129a-0b79-42a2-9f5b-c6b5f6abafd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.78.24']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43d03a3-d02d-4c42-9182-dec9fd8c412b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.124']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8497ec-f2b9-48e3-a8ca-f672a2c1153a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.89.53']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--223c2953-d63a-4d18-8b53-1e726f8e5b13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.76']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9b6337b-dd2a-4ebe-98ee-81accd1a5e58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.64']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da57467-7f62-4151-ba86-8d354a9f76a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.96.174']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08292aaa-04f6-4634-8fad-13c8e610bffa", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.4.113.15']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d347fa-9e84-4d56-8835-08f606a96205", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.138.235']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d665e48a-5c68-40e1-9312-b794fd5a041e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.172']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac07909-f330-4497-9f53-7c77030cc2c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.23']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff41274e-08d7-452a-90a3-b6039e075dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.42.88.54']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--444fc9fe-9372-4ae3-b2eb-2705282b5a20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.112']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db44ad6f-05ab-4851-aa26-6a722ef3c2b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.5']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f21cc6-7c6f-446c-bde0-57d392811888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.62.37']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e98605e-a236-46cc-a329-d9c443c329ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.63.68']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7beeb54-b727-4c83-8113-878165befc07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.33.25']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d099be71-e8e8-4f2a-b856-aecad9f78a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.60']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49fb84c6-b7ad-4992-8b22-bcd8529152df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.79.53']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--615db431-bbc9-4e3f-ae92-275d6187ffd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.110']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e78b2e7-422c-4a24-82e6-86fc0de0be79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.149']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd77a869-d03c-4a95-a50b-e41d5f79f690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.247']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d43c3e1-de1e-4026-811a-3cfdef1fff8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.84.110']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3eb7238-4421-48dd-9413-c24836c1efd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.85.254']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c43a61-2e96-4e60-912b-5cbcc752f6d2", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.134.137']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c25efa-72e4-406d-960d-eff1aefec7cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.139.218']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee87b02-52f3-4868-9825-ac76f6e8fd87", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.74.3.86']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a25d58fe-1466-4aa6-805d-9154296df595", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.78.198.158']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa899b7-95fd-43f9-aeb5-de79149cb77e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.130']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f965da3f-dbaa-4f85-84f5-856c75e94921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.193']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5baa147-f35c-4015-87a5-0881d68ec042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.236']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a623dd-4abc-4939-94bd-9b134b79c4e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.4']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--776b26fd-d0ac-4ef6-88f8-b036eb28f0e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.114.248']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0409ee07-a2eb-40bd-b245-0e0fc8b9d352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.115.117']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc3e07e-7076-495d-89a0-644494fdc9ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.132.41']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1024843-2175-4b53-a2b4-c7a919bcc924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.51']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f44550a0-5be4-45a2-8658-fd3ef3869a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.72']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a51012c-bff4-4fb6-8e47-47432b904115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.245']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0db028-498d-4aee-a9b6-5f1b66eb0e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.186.176']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04eb136-358b-4ae3-8be4-6497229b6140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.190.10']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf98b25-bce7-4116-8def-b6ba28b19371", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.191.178']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32158fe4-92ba-441e-8565-71fd12e4abb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.110']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b55066da-1495-4a58-bcc9-bdf5fff93ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.111']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea3b0cd0-9d91-4351-a0cb-0cdf850eefa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.129']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1490a1b6-c525-41fa-8957-bbdee42e42c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.213.172']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8d8e3d-522c-47ef-b4b5-ad9bd0f55429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.225.32']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--708fc54d-2ee8-40e4-bee7-7f826d6bfe7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.40.217']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d186c91-3d65-415d-91b0-0c409d70fa57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.67.140']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad0cc624-e486-4713-ba3f-4041b268c1cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.8.221']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f6a991a-a86b-420a-89e1-63b601b8c3d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.82.114']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a22836fb-1e27-4f74-8412-a357861048ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.9.95']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c18a50b-8606-45dd-890d-673c72bd0d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.92.218']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acaa2139-d963-415d-b800-fe262b249499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.98.252']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88add171-79da-4ca1-8aec-78a2e1280ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.102']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5acf47e-6c93-4720-ba32-ebda8e7b1991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.103']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aca4f02-5a4f-4dc4-b763-d1df6cefe915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.105']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b2bff6-cce7-42e3-86d2-d5cd703928d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.106']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda5a81c-ab66-4e54-afd3-fa64745073c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.107']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc0230d6-29cd-4fb5-9bfe-8f00326e3289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.115']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c6fe79-0826-4f29-b8a6-ef434b18f787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.116']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--499b59ae-fbcb-407e-8701-c1ae122f64d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.117']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70291d67-1efb-4e09-aa3d-444c26ef70e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.118']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8c7b8e-62f8-49a1-a7d1-2b312668c3d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.119']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b847f3d-f8bd-450e-ab00-0c6d45eb4d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.120']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf574f7a-f3ad-402a-9549-64cef3601e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.121']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de0983b3-bd8f-4b62-9cdb-1b78d1b1e9bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.125']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc8e8ea-3eb2-42c0-9b20-40114e318d95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.127']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff3412ac-a948-4cae-9578-d8f63b4767a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.131']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4981d3e-e160-41f6-b11f-c01f21dff3fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.133']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da3597de-bad1-4afb-850b-4c13431e2894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.134']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8bad76-13c6-44c2-9e1d-645786c04a96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.136']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33cc762d-a523-418e-afac-b6799301652a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.137']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d42abad0-a29d-4402-b621-ecfd18698bfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.139']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a228f70-c14f-4c47-bbf1-12912d166b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.104']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aceab4f4-6c36-48e2-9115-93340abc921d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.87.249.200']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed761812-ec2a-4093-b2fc-1631b55e5f5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.6']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fa75107-29ec-47b0-8526-a7c3e4c4ae69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.173.8']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ba1bbf5-8b6b-431d-8fde-6714c8db4e00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.180.62']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23180d05-de9f-49b2-9755-096df3c1a714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.93.93']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb6b1e5-ebc5-4981-8c01-672495334edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.32']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e8ff31-893a-4bef-b032-de2437663173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.149.191.249']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--464154fd-3695-4bc5-912a-d8f039501fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.178.13']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26b8b9f-3643-47f0-830a-6954ac5a50f6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.16.202.73']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69205609-f7ef-4481-9cb0-923cee4c8c24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.210.121.103']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--769ff241-f1fb-4d9f-a25a-7a541e694747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.23.108.238']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92e9f3e4-e86e-431d-9891-f2351b49232f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.62.157.119']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1464bb02-1752-4e32-a660-58ab720bd516", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.8.78.121']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f3ab4c3-1dce-4d60-b277-61cb413859b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.101.11.110']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf45e49-7729-492d-8e40-6791601c5a80", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.186']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c9f429-14ea-4d94-924d-659fc7f1aa0a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.195']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4d31b58-4f1c-4dde-8bc5-843e144e126b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.17.86.16']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8b6aa4-aee6-4c6f-946c-0d14202c7d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.179.0']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c88a36d-1462-4cde-83fd-9a5dcd90b4e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.201.172']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a0c21e-a37c-4857-9bcc-1ac55b86ca71", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.144.66']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d427b4f0-79f8-4c63-8489-bafb184c8d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.187.66']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e0fcfd3-bc45-4f5c-a661-707eabee99cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.201.218']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf2508f-3daf-4fff-81d5-79e895764e17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.210.152']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8672ed0-85b9-461a-b242-6015561f63bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.215.59']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b305d04-45c8-4320-8b1c-9145ececc139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.129']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2293a669-17a6-4cd4-b7e5-ebd796146792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.197']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65869eda-1e8d-4665-913e-9da7aa0bde6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.133']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae3c1e58-02a5-488d-8261-6093c7c9dc79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.141']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3997f43-dc42-4e4f-85e5-40b350c81a5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.189']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca98f25-ba5c-4765-a1f8-a2d91230624a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.94']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6b277c0-a1e8-4067-8025-b2b805d6258f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.210']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d90bc3d3-b0af-48e7-a7f8-72b6e79a4c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.56']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e0bcbf5-dcfb-4f17-91e1-92bbd96ffbda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.26.220']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87c3dbed-a138-4e22-a702-fdc1d4886f37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.82.57']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43670dd8-4593-4dca-9024-2d3d45cb8dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.118.57']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--853a417c-84f9-4c92-bcdc-19310fd76065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.124.182']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fedf5c7-91d3-442f-9ebe-4df8f76429ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.125.42']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e255277d-9785-401d-b915-1649d75adfb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.143.234']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--594cc809-edfd-48c6-9475-94ce47b30d4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.146.238']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66224b86-daae-405a-ae85-76bf8d51befc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.163.20']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5c1ae2e-10b0-4c2a-aace-e44f6a0ead87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.185.131']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a44271bb-2500-4372-a930-8548c841437b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.186.31']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da5067f3-954a-4805-a97e-ca17ceffdedc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.37.13']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4697e0e6-5edc-49ef-9c58-536d9745c1d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.37.210']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26fba9be-bee5-4006-a6d4-fd8fffc42a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.38.64']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--debad532-0972-42b9-a7b6-0bba1f00963b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.38.74']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--654766de-341a-45b6-b817-df213908b496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.43.129']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2571718d-0017-42a4-9ffe-d34e7a96595a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.45.94']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7a475d3-12bb-41bb-84f1-3ab845e30e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.46.113']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eadaca46-6152-4cfc-beba-b435b9060711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.54.17']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cb2c4a2-9d9d-4cb0-aea8-b651db691b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.88.100']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48c856bf-6968-4f70-af85-1459be999ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.88.140']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33990e40-3d90-4451-82cf-16fb1dc01284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.91.27']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ec7fd6-1e42-4f96-badb-2c3df19ee3aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.0.28']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f41bf19f-5c2f-4335-8720-6338729ef759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.101.253']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40be1475-3698-4c59-b821-e70dcec904ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.101.89']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9bee0ec-9d35-4936-96f4-fbb5e1135a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.109.140']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17dcf868-f289-45a4-94aa-a14708edf5e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.119.166']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e846036e-0fed-4dc2-a1ed-9ef0116fa59a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.121.162']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0852be03-271e-47c4-b93f-cc19cc0bac25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.122.246']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71f3067-0d00-4f65-bc26-2a6fbbca003b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.124.86']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a70c4dc-0cbc-4c11-a5f0-a3f614ac6361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.126.221']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee5e723b-2298-4348-94b1-600da1c1dd20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.127.18']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf12ab46-e0db-415c-bb4d-3f7608693a7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.140.21']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b097c260-91a2-479f-9ee3-9b57f98a37bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.143.69']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eadd6329-70a6-491d-b491-07090d748088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.143.84']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d0486ec-23c1-4dea-95e7-72aab916c31d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.164.231']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a75989ee-47f2-452f-96a8-7cda537ff924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.170.2']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d42d50b6-b4ed-4f7b-9b04-420b53889ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.175.17']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c88350f-111e-48ea-9280-e106feb564bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.180.76']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdb1111d-f03a-4b14-9a9f-ea50728a03f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.185.170']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74610633-004e-4890-9601-a713fcdb8050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.243.238']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1905b8d7-3040-41be-8c1d-d6e55fe5b2a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.238']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46443093-b9d7-4f85-b568-9df70f470c95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.252.230']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c65ac9-8bfe-419b-978f-100245556daa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.30.94']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f762e28-b601-4d6d-b594-47c083df0739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.31.44']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68902bcf-6392-45c6-9514-08d3f74eaa98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.32.100']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84038dd6-ec9f-4cf3-99b0-11d4c8499ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.46.207']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57adcc78-6aab-442c-a204-df43ef288a72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.50.33']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0485ed06-fa2e-44e0-9330-92a39a48d7ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.56.227']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--219fb267-e841-4d66-8233-39b32c351022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.57.96']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fbe61e1-ddfe-4700-bbd4-b3b0c4128285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.65.123']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d226a999-223e-4f43-8e0d-809f2d057eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.69.170']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf834a77-2cc6-44ab-8f2a-36a0185e1093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.78.194']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b83aed6-d293-4e0a-aa63-0f3a115d1898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.78.53']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7ab93aa-3f31-4b91-b46f-b35b78328000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.81.121']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45229890-257f-4b74-8e47-9e5dc5002baf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.82.0']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c166ebf9-f2a0-478e-a8a3-260a9d464c09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.86.119']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6fbeb03-ceb6-4350-9a0e-e65aaf32dcf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.91.249']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccfec88e-be17-46a1-a8ce-49f1489069e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.92.248']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1884d5a4-5f19-440b-a5fe-406facb3e439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.96.146']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a48aa360-bccf-48bd-bb00-82244b8b051f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.128.244']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c4921e8-ace8-48a0-bce1-62f636b26a11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.172.138']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da04e97c-3a6a-4afd-8895-ae8c3211351d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.199.36']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7110b3-9273-47c7-b793-0d821c30bac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.202.137']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--352c6e11-8115-46fb-9f03-259ab5ac6cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.207.105']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1391fd-b62d-4b34-ac32-1daf6f098763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.213.222']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ff815f-42a3-4b13-a3b8-53d3549d6c56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.231.12']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--254dc893-5db9-43df-9608-dd21320b93c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.29.82']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69cc5a4b-dc42-4c8f-b4de-0f65a3068186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.66.99']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a615f0-dc05-4a42-ba61-9d7536bb2a7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.69.53']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7015ef6c-f9a3-4375-8171-b68c3f06dd26", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.72.182']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd62c7ca-b203-464b-8b47-c6962acc0562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.72.52']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b3a02e-a352-4905-b6f4-58fd17910935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.13.101']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6991f514-9b8a-4a77-a730-0379470dee9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.182.54']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--407787b4-7f8c-40f7-a1a0-a47b8ee791b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.218.117']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc5b380e-943e-4041-a4ee-794f87c6adc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.221.175']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--261063e4-ce19-4ebd-9206-cf7508586bf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.223.125']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657d846a-fe15-4062-8ab3-c6d6a7e15d27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.225.225']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8391b6ab-1681-4dfd-a693-136782e4d7e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.232.193']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c7acb7f-22ec-49d0-8338-b62c8c8481ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.80.3.212']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0882186b-c97c-4539-9ba3-639955b8697e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.139']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--275edaf3-45ef-4484-abf7-e7a41c7f0a0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.107.47']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dd1e71d-ad40-4841-9905-6a0d5c1de71b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.68']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6f8d44-7cb2-4e90-a35c-5c24de09bb6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.82']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c64a39e-99be-4bf5-b152-72bbf9753883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.225']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e83228-9538-4f14-ab4f-7158c37c81fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.43']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--977db046-287c-44f9-8732-96c2475ae903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.182']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c505283f-5331-4bfb-8252-9d8e28ebcd99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.86']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7091397-9c25-42a0-b3bd-5d048c5e6c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.90']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f631b7-30cf-4315-83d8-bc11e74934b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.124']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bafe8ff-8e5d-4c67-9096-571ef5427492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.16']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2d3389f-61fa-4387-ac3f-c3686992ea17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.177']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe56da38-cc82-4a56-845a-0f585ebd7763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.65']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47962720-1c4d-4673-8325-7f37410aa567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.187.144']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da1773b5-fc0b-4ebc-bb0b-24f4b31cc2c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.190.164']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b3c0b90-1593-4b1f-bd22-7ac1824ce011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.198.110']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3683fd4-00ca-46de-8d37-8fccf318bca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.199.160']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb23e90a-07bb-4a67-85c8-a823e0f49926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.202.133']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808df7bd-1ac8-4ab8-96b6-b401ecf52520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.204.140']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab49595-2429-4e31-abb3-b071d7a30d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.206.196']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18841ed8-cf0c-4e76-8625-aea02b7157f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.225.126']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0df26bd-1d47-4ab1-ae84-272414871740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.86.232.8']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93212016-6389-4b74-9b71-6c081d3a0666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.12.190']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5605fb-0323-43fa-9a31-fa103d618b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.19.130']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aea0724-03c4-4a2a-bcb3-9c979bc1bded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.54.220']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3174e8b-349c-4cfd-9ded-73ec0c22f661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.230.198']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94bdcf33-eaa4-450e-a5eb-0789e02afdff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.230.226']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b1f6f4-6397-4c84-bcdf-7bee2a1634b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.16.59']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b394f67-2e2c-4387-bd3f-8b6f64ccc4df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.18.172']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e3e6f3-30c4-4e01-a0ed-bf8a99adc843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.2.219']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d3d30ec-2e94-483e-bff9-50c9c6ded268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.94.77']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e06e66-883f-42a9-a02e-96cd32aa7645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.98.188.33']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76300d9f-2ff7-4fa5-b5dd-23291a2924c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.125']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8348a0e-cab5-40c9-93cc-97ce1e0503b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.160']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--365c1261-e0f5-46f6-a126-e33f1b2ff149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.79']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd8b763-4d25-4714-8a17-8d73de100b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.84.135']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c19a04a-6921-436a-aeb6-96df77c9ae59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.87.78']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8ad32de-51c8-4b00-943c-a90de4d3b634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.222.11.127']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--679046c0-786f-49d6-b30d-1c5f53b372d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.158.38.70']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b4a9de2-0c8b-43a3-87f0-c4ff613e424f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.234.192.248']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdafda4a-501f-4d5d-97f1-9e2c034a35c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.249.205.38']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa3d15ec-0d03-4edd-9475-4b6cb4c4dad8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.183.84']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f202722-276c-48a1-917f-9ba06718862b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.73.183']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eef7b36-73ff-4cc2-a2a6-a9ab8a64711c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.169.63']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4bdbb66-e063-4de0-bf49-b9c3485963e5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.181.124.7']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc5b001-82a0-4116-8d23-b091957168a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.183.101.141']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30342795-67a7-4d21-b1e9-1b2269e7c67c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.26']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfdf5aa7-4a1a-4e08-b94a-ceb68b5f3cbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.30']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1100800-7c0b-470e-ad37-12cc182c33db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.34']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--096de0de-83de-4067-b652-595c31b2216c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.46']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69fc326f-e83f-4839-9663-b660437e843e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.189.130.158']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c22dc258-cf7f-4ad3-a85c-6615550437d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.189.130.33']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3956df-72ed-459a-9360-30aeb8a4669d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.189.178.126']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--967876c8-ace6-4e44-83df-59df17ced962", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.190.167.117']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d91607dc-fc82-48fc-8693-3c7134d49f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.215.35.86']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de4eb3b-d8e8-4ffb-86b0-f08684609354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.110']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75532147-1096-4c94-a8df-6d5ab83bdf7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.112']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c843ee-2ff6-4071-9ac8-bc5d33458c41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.114']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f42553d-ddae-4d1c-bef2-b6b2240c7790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.73']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2329f5a5-891c-4dab-abb0-560f0149136a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.74']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c80d4db-4f57-44f1-a52d-7987930f090b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.76']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9be430d-8854-4a62-bbd3-8ebffb3e9549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.81']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93337dcc-5943-4c4d-b39b-8173c34b5c16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.86']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0fbcb92-571b-40c0-9c35-b80dacd6db1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.94']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72eee1ad-edf5-4515-a771-cbf2bc0d341b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.98']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--190b4a38-0736-4805-9319-a91ec241ecc5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.252.154.55']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8d0b467-ba68-4503-a127-5837ce382f7d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.39.49.245']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a945a1ac-cd6b-4195-a3fb-bc9951aad950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.126']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b745cc0-0f43-4a26-bc78-44c78dad1208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2023-1389. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.33']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--514c64cc-c621-4af9-9fd0-e26a23544a9b", "relationship_type": "indicates", "source_ref": "indicator--5b745cc0-0f43-4a26-bc78-44c78dad1208", "target_ref": "vulnerability--0f503f92-1c5b-4357-bd56-bd6059070790", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d10c006-aef1-48a2-9628-95de554bc15d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.128.43']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e4abad-3be7-47e7-8c99-0437c4f1f749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.80']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00d790a7-ab1e-4226-a6d9-3e2764ec0b5e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.106.59']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb4b40e4-f96b-474a-a606-729322aba911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.2.219']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc3bdf76-9458-417d-b7f4-03c32c8628d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.72.42']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d240867-ed75-452f-9645-4318df06a170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.62.135.79']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--969395bb-edbe-485f-8929-6c875b89125a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.63.162.21']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeea7910-8cd0-42aa-872c-28f4af02ee47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.203']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c5d9c62-1b1e-429d-ba6d-fd340e17e831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.47']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2613907b-6ef3-47ab-ab02-5b0d679b8865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.104.219']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4942afa-7130-46c0-8215-644c1bcfc89e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.110.167']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d77668c-a7a0-4247-9ea7-09dab6aab044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.111.44']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--762537cd-36c0-4c25-b044-00d507ff9636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.161.128.68']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7504559-c0f1-47c0-9dda-1017a7c3738c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.161.198.228']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a422686d-fb07-4fa9-ac38-2308ef246234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.210.79.90']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a22653e9-2216-4c71-964a-93a1d93b4fc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.254.17.136']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea0d23ff-faf3-45b8-b270-4d733f40b3fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.255.204.163']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--840660eb-f25f-4363-99a6-6751c4cacb40", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.255.66.90']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54715037-8e7e-4c4b-a41c-907cc7550f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.12.15']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeab5b99-e9ca-47c3-aed6-80fd364ffad2", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.165.152']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d6568c-325c-4d89-98f1-7c221a49f92e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.226.110']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd835a88-fe45-40b2-a76f-9199f1f1062f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.236.93']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db10fb1-8abb-4562-bd35-198c85dd73ec", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.34.111']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d1a657-7d10-4380-8b01-8d022cec26a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.77.222.246']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a45187a3-e546-4ca4-9884-c30f73fe09bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.67.63']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--256e5e37-233e-433b-aad1-fc7cee1137bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.8.152.229']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d4e827-d07a-4c7d-8ab6-a65b6f06a8f0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.89.129.30']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--356fd44c-5cbf-458d-a572-76d66924b011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.154.20.51']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4807af03-d885-4c5d-821c-03ef156786f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.161.74.194']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8551b7d1-5c09-4d5b-85b9-426c16825df2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.88.155']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8426f4a9-2cd7-48a3-8a3c-0050aac7e51f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.90.3']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f7debb6-0f10-4233-9bb8-cd3859473c98", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.138']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--607b2789-5013-419c-83f3-a41e751a7ee6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.139']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a235787-03c8-4432-a44f-b2ddae4c8aa7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.140']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d0116e-c508-4486-bad5-ebbc4224e3af", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.147']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a896805-a2ab-4d8b-9dbd-3e53096bdb1e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.157']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c5476c0-494f-43d8-9d09-26f6ec640a70", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.160']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab09ca56-6414-43a6-9a76-3b29a135be12", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.161']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1a1881-9861-4198-8e3b-f30e9eedbc4d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.168']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33188548-34ef-448b-bd4a-f7ee9fd24e77", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.169']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da51e59a-1b8a-458e-b21a-4938afe33037", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.173']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b68a3e-724c-45cc-a663-04e6684123f0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.176']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6655b220-4c73-4d43-954c-59ee20c48696", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.179']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f714e318-5ffa-4bd5-b84e-cbf84b7a69bb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.187']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb4856a-8411-412b-a3f7-69bb95156892", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.19']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aee2ace-f7ef-4d50-9a8d-0f8abc15d56b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.190']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8761a651-ba84-42bd-8670-d4417b048ef7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.195']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f21d168-28b2-4507-a427-8447b5c87661", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.197']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6698d59e-83f0-4e85-843f-c6070afa9cc0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.20']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2119fdb-50bd-4dfd-bdae-633c1b73aa75", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.204']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be714ee3-9e3d-45c2-b707-ecaa982c3395", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.206']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72cc004b-452e-47cd-884a-1397f046384f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.21']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade14119-6138-42f2-b49a-b74b80a95326", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.216']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5802efbc-6a5c-4ea3-9fb7-ccfb20c372e7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.220']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bca85ce-04f3-4d06-920b-d12af9fb099e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.231']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad65d352-70af-468e-9392-2b53cf569f14", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.25']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c349652a-9723-498a-ac37-921a9ce4c65b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.136.250']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e499fa4d-7f15-4b94-915a-711ff0552dee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.182.35']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2721c6f-71c2-4aef-83da-513f2f49d222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.231.113']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e50ff79-1dde-4b5b-87fb-9a24bf0e24fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.20.198.190']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a51a142f-ec47-4da5-9e83-205b112d8740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.240.186.24']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bba08bb-8bdf-4082-b956-77cfc1029120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.43.226']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c2198c-9ea3-4532-902d-464f00a9f9ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.36.131.235']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c0c3472-f6a7-4a02-a072-5e6af9ca40ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.128.225.99']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e1c3726-6ab7-4d58-9b96-70f2080f6e50", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.5']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07878ce-5ee9-4014-bc9a-1eed1c8352e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.19.141.77']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f40408d2-08db-45aa-a956-c69fbc000378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.212.237.155']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed3b131-2b5a-448e-91d8-3b274593cba3", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.220.41.251']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de96e4e2-c9c5-4b52-9da1-d10390f87d36", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.226.230.112']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4728e84-e5fc-49cb-a4e9-4906321cb755", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.6.206.239']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a772a433-60ac-4815-8aa6-93f62161e3fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.65.142.110']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0db99626-1100-4ff9-8bae-44404afeb615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.69.183.159']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a39a1395-5650-4fa2-8b4e-1942bb639b4d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.98.197.137']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38e5c096-db14-4369-b79c-b708c057c59a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.115.2.84']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc24d652-84f5-4978-be05-3408f9ef736e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.120.224.182']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ad6fc9-3b86-41ec-a886-41e50d4eed10", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.184.156.170']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3506f2d-6117-4058-aff8-d0c42720e521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.10.210.142']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad68405a-2d8f-49ac-a78a-d256d1bc6864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.177.8.34']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e571d126-7a4e-4c48-b358-2863ceb30e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.188.249.64']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f62fa637-3398-48ab-bde8-0a34a06bd18f", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.189.60.198']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99cd19ec-6f96-4a2f-8f43-2173ecc0cd79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.191.125.35']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e29361f-f5ac-4570-86d8-469684b2aec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.138.113.187']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0076108-34db-4581-a0fb-903e304db5f0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.223.6.218']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c09c0dc4-af01-4b5a-8a85-a359017a2997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.240.17.66']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d357f512-0af6-46fa-8714-ef1d0a5e99c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.49.60.146']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e636e61a-d913-4cb9-98c7-3f9b039367c9", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.141.63.15']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2485af1-4294-4b55-bdc9-8a2d2782ed36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.189.225']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d31118-451c-4a5a-b39b-97a8ee6d898e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.207.172']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5faae27d-3ef5-456c-9201-7d2d501051ff", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.92.103']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac44152a-2113-4668-9d88-9964e804d7b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.234.166.237']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9542572-82ba-42ff-99b7-35f34ea32f69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.234.82.72']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e57ec1-2403-4d95-aaa7-287d4c23d4db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.84.189.117']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63dea134-cf25-4674-a05b-667097e6d931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.20.48.236']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be783ba1-175c-40d9-b86a-270dc3b39a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.26.127']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c598ca92-204b-401b-a0a5-215f1ef58510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.66.229']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14738a1e-77e2-4427-afb8-acef54a3b6c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.102.249']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6c5d966-2e57-4523-b69c-69361e752d5f", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.107.192']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb03405-4166-489d-a8e4-eb81e39495d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.108.146']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc0721b8-53f7-428d-9311-ad62e573e259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.53.188']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80172b6a-886b-4d4e-8c1c-d2a9c1462779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.140.124']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b762719d-67f8-4d4a-84c2-42e2493f527c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.183.146']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63fc6130-caac-4150-ac5a-0971e07cd174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.236.133.131']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8493911e-6e7d-478c-9052-cb487258b6b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.236.134.19']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--737babad-8221-437f-94a1-55352eb096be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.31.53.170']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ca63e8-4efe-4b09-b873-d30da7d06d05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.100']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d97217-6ea2-4879-8108-1973a9a294fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.101']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f9eb26f-045e-4143-aa1a-dabd1bbaa137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.103']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf868b4c-5975-439b-979b-cfe60187f41a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.105']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67396211-f93b-4e15-bf53-9c7e52973735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.107']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--295f4b03-00fa-41c4-ab97-dbbc67782c3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.111']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30d8c2b1-6b9f-4325-ad80-e4d57094767f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.119']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca21724-17ef-4ccd-bae4-027d85e2ba5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.120']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d47d1b0-9d69-464d-976e-f8edee40acca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.122']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f6f6e2-30e1-4dbe-afb1-a95285769164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.127']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed7281ab-3441-470e-999d-181500327b01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.128']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb462aa5-c711-4be1-9ee4-64c8d8535cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.13']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b8fb1b-ab28-409e-89ad-70fad8f9daf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.14']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ec651d-9da9-4f02-90fc-cf8c81446da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.141']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89b0668c-6c6d-4c33-a992-863a991b528f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.147']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8add7e68-4412-4176-a04c-6c01374e7503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.15']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbda0c7e-a170-4b3d-8ed3-2b8825e804e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.150']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9645b0a-b601-47b6-9597-497f636fd6d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.153']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07b44d63-9f7d-4651-8464-1074fd9dee26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.158']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74010349-0b28-4930-b9a4-9045a4daea0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.170']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--414a48bd-d1b5-4227-bdf1-ac65a683d64f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.172']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a92048b-84a7-4856-bdf2-d8e30d137bc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.174']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da14428-5f6d-4533-a84f-f73f1b3e8885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.176']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34712c1c-7842-49c1-ba73-0bf7ce9747f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.178']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc4eab17-4cdb-49cb-9660-22bbc101f684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.180']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1593c5-b4a9-4f85-8592-2013395dd51c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.188']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc08718d-97de-402b-862b-38b05249e1b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.19']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e4dff61-3efa-446f-8126-b64b6c842b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.195']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3737c690-0250-46e5-bc1d-6a1aa7ee9edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.197']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af42a3ba-4451-40e5-a95c-ae71bebc008d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.199']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db9771e6-ca8f-444e-9e4e-a1982f08765a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.20']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2345d4b-54cc-49f8-b6f6-1a55afe2983a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.200']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--809a1eb8-559d-4321-97e1-9c2f4d4e1f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.207']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec73bf13-d4b5-41ae-a345-f7a176496109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.209']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcf65ce3-ab1a-419e-bb5b-a9c5c28a379a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.211']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e80aab4-45c7-4baa-b283-6ff8861e5ec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.218']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffb7c621-dc59-4b01-9a13-39731989b65f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.220']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d71869c-622c-4636-b3d0-f30fbe243108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.226']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b82e48d-b38e-4450-b28e-80f4bd34e0be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.228']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3aded36-e183-4a02-b336-a9343e7ee2ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.23']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f740dd-00bc-4a2b-b9c5-8d0b3f7d8b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.26']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba61ca6e-7386-4378-b7dc-7fb5b6e5a065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.34']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5653b5b-aa2b-470b-bff9-6019626aee16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.37']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3130f0e-fb22-4f1a-ad2e-619ddbc705ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.38']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e54e6c95-e115-4216-ae10-646cf57eebf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.47']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6500d278-0193-4587-865c-aa2b5d185855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.52']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--429e7317-60ac-4254-9351-183c1b4e264a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.53']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e715b2eb-bc84-45a2-b9f8-c23ef130d94d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.54']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b7593a-8656-4975-bca2-bc7b05b956b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.58']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f938c24-8759-483c-9f2e-ed17b12dc9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.59']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c349de8d-0577-4bf6-88b8-cd9bf7459fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.62']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca7684a-20a0-46bf-a0f6-99be60559f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.63']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ffaed6-9d61-4f85-909f-535c2972d5cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.64']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea4a7831-768d-423d-877d-5c1c35a483bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.65']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db9ca499-588e-498b-805a-383804df1552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.66']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e68c2cee-7592-4130-a258-e244e3f5f21e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.69']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f5a0e98-5ce2-4215-8fa7-85c209ad59bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.74']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93a73b61-21a1-4278-a4fe-3cce71b2d3b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.78']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d82aa620-fece-4668-908a-5fbf63cc1b38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.79']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f10389c-652d-4a4b-a624-3cd9c156919b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.80']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--002d1d60-d5ad-4318-be57-b5c8b4b34ba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.84']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e04119-aeaa-463e-9cef-76498a8d7782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.85']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed03209-3b62-4f9a-8a6b-dc7580668778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.86']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ecf3034-17b3-4672-8b87-a8304065ee7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.99']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e6a600-4275-4e1b-9c0c-793ced4cac6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.104']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10bdf39f-3906-4221-8cb8-482f707d3953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.107']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20cf3232-6a7c-46fa-b8e1-1c33719fe1f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.110']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ccf2af-fdf0-4f30-8fa4-329d6b25db85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.112']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96e3eea2-0285-48b2-8a74-e630edee6b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.117']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3765eb-aa04-42e0-a8b4-b6c8dfa9b957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.127']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03fbf601-f2aa-4623-80a8-3455545fd1bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.136']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dcbece8-3077-45a8-b390-ff6f6444b716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.137']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6509dd-3003-4f8c-b176-2ebc0ddde006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.140']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--961855ed-2316-4cb6-abf8-ae6bb6a52775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.141']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f001cf34-0b9c-4520-86e3-a19e4f66e935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.142']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adaa66ed-c5b6-4146-ab6e-db7b6e1b7192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.144']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c09f8521-515f-46af-8df4-3bc97a4341d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.15']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26fcc9e3-eb9e-4426-91af-8f19e6f033f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.150']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--120d1363-4f26-40fe-b38c-563cce172ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.153']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2838c2c1-3c62-4a74-aede-bce31fd42187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.156']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a0a2056-fa15-4120-a732-a5e239d1bf85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.157']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c46357dc-75d6-4813-858f-26bf26390edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.158']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e138d1-5cb2-4f47-9271-4aec132c7030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.160']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71d9445-b18a-4037-b34c-6014e5a007c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.162']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8a3ecb-200c-490f-a3ef-9e2dcd5a396c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.169']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--577d64ac-7430-4b7f-a29d-70bd75185175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.170']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f25d6d2d-ca72-4f4f-be55-e2e81d69ef96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.173']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40fdf28f-0ac5-4579-a3b4-6e4a56f77684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.177']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd2690a-2065-4d91-aa02-68118798272e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.18']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f1f358-bde2-4681-ac63-082d1bb0c5f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.190']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2576af21-7d7f-48ff-b27a-694ffe0a33c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.195']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1539122c-6e0b-44bd-806f-b40660e12975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.196']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8f48e70-59af-4c71-83e6-3cd191b1604f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.198']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88dff3f3-da6f-4959-b631-aeb94442eaa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.201']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb0d8e3e-a528-4711-b7be-ccf8816561f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.207']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e171d02d-96c0-4d98-8bc5-218605253ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.21']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92715425-ce04-4414-854c-c31ebc4acc54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.216']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2409e73e-4152-466a-99e4-927275885280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.219']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae53f11-ed0f-4090-87a6-cf0eaabaf59b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.220']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b01181e1-7c7a-4bcd-84a9-f025b3623de3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.238']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fb9f9c0-503d-4f43-b388-33c3ec922457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.240']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e96188d-ee99-44b4-bfba-76fdb01cf025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.26']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--033cc09b-3024-40e8-b144-26d8687d7693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.29']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd7aacf-94c8-4b50-800d-f7927f9db3bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.34']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c26426-4f9b-4547-a208-8009a5434dc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.35']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff7b72e5-3026-499e-890d-b86c3f8937cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.38']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a8a25f6-c160-4ada-ab69-c59dd5c3a6b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.43']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f434298-6012-43d8-96e7-798275b3f9d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.44']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3aab40d-df39-46a9-bc36-5ca948415c64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.46']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ea40a8-e437-43d5-858d-3c395f3a2bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.47']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e9be9ff-5fb5-422f-b734-2367396ad3ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.49']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de5e76e-0cda-4942-9c39-043b4e1db536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.53']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a2d6fb-bac1-48ad-b155-0a74bece7852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.58']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba860d6-f6f2-4d0c-ada9-74d65a677889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.60']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f329a749-0068-40e9-ac9e-011954402ac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.61']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b32ce75-6b8e-4ba2-80de-aa18606eb64d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.64']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a8d647-c109-44e3-885d-b6cc8c1be31b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.72']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6886c2b1-0828-4a68-9cc5-38dd687bf93d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.78']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6b1665b-b907-44f2-a428-2e8a09826e47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.80']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e6b5f4c-b306-4c5a-bef3-905e3afa7326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.82']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f26a0b-8b58-4cf2-9bc0-53e9121f3db0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.87']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01d59390-7b26-4c43-8dd8-ed0343328eca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.9']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be8d06f9-6015-42a6-8c34-52c49bb490fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.93']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef225337-6280-4f2f-8c76-20ffc21a52ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.95']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6c6d8f-55de-4950-97d7-e410854e5eee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.97']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b42ab63-d3a9-41f2-b2f6-36d8698848c9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.167']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d68e2267-b60b-4add-af2a-e393838daea9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.178']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3cfd2ef-0bcc-40bf-a3c1-eca327002416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.133']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31cb752a-8389-437b-8a07-56c032e39cea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.134']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f91f89-ad09-42fb-8f93-f6ad80580da5", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.143']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ecf0386-62ed-4449-8f9e-e5968ad68b56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.166']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--557111cc-9a13-4032-a297-506cc27d96fa", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.180']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fcf679e-373b-4a72-9074-b8dd2e2be06f", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.78']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--831927b8-d1d2-4f98-8db5-aada377e1f27", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.80']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce04a51-cf85-43ed-aaf1-27c176d2ef6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.81']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9680425b-25ec-4e8f-b4b7-a8d127d5bb99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.86']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10ef9f29-01db-4441-8da1-ceba42fd37f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.21.231.81']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--350b12f7-7282-49cb-b0f7-5b1a896bbe52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.10']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e7cafa-f81b-4ea5-9148-df31b8cc9081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.101']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb61ca5-0868-45d2-9722-1b572a056d8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.105']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8498cd0b-cd4e-4411-8829-823186092d75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.108']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da79af8-0f26-4eb1-9959-0df7e06f1280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.110']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917cc090-28d0-4a62-9dac-77defd527e3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.112']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e18b60f0-831d-4a64-bc60-7249479a7cd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.12']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--547cd502-a808-4448-b5bf-923486c5f455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.121']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--250b16f0-6f10-4ec4-80ec-4682bd9848d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.122']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1715d89f-80ab-459c-8c33-81fd006359da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.124']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef25d97-75c1-49f9-822a-7c369b0aa80e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.125']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31032687-1965-4e9f-9a02-69e165292d90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.126']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ed6275-506e-4fda-8adf-58ab415e446a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.127']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ae4d3c-3409-4243-b946-6f1506543a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.129']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad22a120-7cdb-405d-bc5b-8c605624d7e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.13']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1216cb-4245-42bd-8502-4aa566032037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.131']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdfbd89f-1c16-42c1-9ae7-2f124809b3d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.133']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4870f864-3401-49dc-9213-948e814fb5ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.144']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31234f18-bef4-47d0-af4a-a387c023261d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.145']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27254d85-4a3e-4b8c-8de3-fd19b0f85103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.149']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b863218c-40c3-4f68-9c0f-660717a5e715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.15']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--056bf9a7-4b2e-401e-9c9a-820da86de292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.151']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87fc73eb-fca8-4ce9-9841-ac566eecb569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.152']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--238bc936-1137-44b9-8606-7bb7a26d3150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.154']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d27dd944-f5f7-4268-ac31-fc82bc45ca72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.155']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53f7a470-b741-4953-bc59-d56f64ebbbb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.158']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4217ce8f-9b7e-4e3a-98ec-6c7daed775e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.160']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f08a4ee-f2cc-4f5b-a581-e3ed55b9e625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.163']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ca96b7d-be2d-4058-9183-abf543dc1231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.165']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ff658e-5462-4df5-8276-d2155389c334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.166']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d2dbc0-4f9a-403e-a366-e4aea7165f0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.169']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed0b0cb-4cfa-4748-9898-658aba20e3e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.172']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a63230aa-a367-4686-92c3-be2ec5d15745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.174']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8d799cb-d8ad-44da-97d6-01f1890f44ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.175']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b63346-2442-4077-9bb2-45e8eab3311d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.178']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3af5058-fe99-46c9-87ff-f1728bf7abfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.179']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e4a968-6066-46d6-bc34-4ba06b6090b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.186']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e94275-2046-46a9-b763-111ff6b6d468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.190']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757cf13c-bb8f-40d9-b434-e7361344f2f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.196']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--742891e8-4df8-473f-bf0b-9a2c852569fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.200']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff6b91c-1677-4d10-8eb0-2d8d637b4c55", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.202']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f68fbb-9f73-4ea0-b7d8-647b45dc535a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.205']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add83020-c913-4066-97cd-6c34062d1334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.206']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92554af1-4013-44dc-a9d6-432f7767dc1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.207']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e596b927-9cd4-4ef4-81eb-ac0c9fcd904a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.208']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54dd4b36-eff2-48b4-831c-14fc47e4e81a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.209']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7247a694-3c90-42c0-8fb2-2a44e84a2aa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.211']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a583d59a-95db-402d-9793-eeb71257230e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.212']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25d1cb19-caf3-4b0b-83ed-8924d1bb7eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.215']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ed6030-02c1-4794-a1b3-1f96b16eb8b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.219']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5450a1a-81b2-4115-b08e-91cbd7ea5574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.221']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6615714c-29f9-4214-bcee-a28d5e6e36d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.222']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205b3396-45f7-4599-8a28-9cab16d9ed2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.223']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d077ad5d-5a7a-4ad3-b825-f5be7b3bee0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.227']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87aa3f9a-be9a-4a49-ae90-f586157bfaad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.228']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e06ff0ab-648e-48ac-951c-ae2eb1820805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.23']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e28e41b-a6f8-4e5f-9424-c404b620b6b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.230']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0ba340-443d-4e2d-a6b6-eef8186e63e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.233']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--107ac0fb-d809-4540-9687-df3db123b818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.235']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9407b400-24e1-4746-b441-05205074f265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.237']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ddd50b-e34f-4b83-8c60-c0be776e2cb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.239']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752301f4-98e5-46c5-b2c3-085170faa5d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.26']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--342d75b6-81c4-4186-8cbb-013741db9b07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.28']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61794e2-cc4b-496f-8ee6-3a4bba6ba84f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.29']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c80e3f83-a5c7-4b33-8f09-c355279d56c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.30']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--599b9db8-0093-425c-b30f-48d4e5df52f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.38']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--835eb628-ac06-4feb-a7f0-b9922ea1d458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.45']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a80b40-106e-4570-a795-62b5cb51eb70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.48']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec317c2-9df2-43f0-8640-54087eecdbb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.49']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255bec97-01a5-488b-84b3-75eefa3aebf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.51']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7565b46-43fb-469d-b35f-982fe63c3c96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.54']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecc3cb94-6c77-4a18-8142-bba4aaf5b6ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.58']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9040832d-83e7-4453-8b47-0f4d03373bf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.60']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd313f45-2dbe-4bfd-ad23-de804aaed6a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.69']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3658304d-cbbc-4f98-aee9-94fa0a2c93b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.70']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938a7613-ed8d-4441-b7c7-8f3a50e3d81f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.77']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6bb6dd2-82d2-45ec-83a0-2759b810cfbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.79']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9433e6f-8d0b-4f46-ba99-3fe42862a0b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.87']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21855e9e-513f-43ef-9151-082d3bfc45d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.91']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10622756-d524-4813-857f-5e0cdd067820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.92']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23111d26-8c34-467c-8a77-a1461dc274b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.94']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adb13645-7468-498a-aa6f-a3d1fc706c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.98']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1e05041-5428-4907-ac3c-0997a45a4774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.100']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e37be4-8d91-4dff-8381-9ec50eba70e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.104']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2606850-e1e0-47f5-aa17-82d86bf0ae5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.106']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--024ce696-901d-4b1a-9b65-c5babb25cd9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.110']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a97cd3-f51c-409c-ba85-cc21106a942e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.111']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f589f103-e957-4326-abcb-5cbbd15b0b65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.117']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--711013c0-ba7e-411c-9ff6-46041448de65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.122']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa21dc7e-1457-44cc-be21-4de8c716893a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.72']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c56402a-9b2e-4cb5-9d59-d86872563801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.74']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc21c0cf-43fd-4423-9163-efd74ecff9b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.75']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb77065-3de6-4105-995f-ae86e33dd920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.76']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--babf2fdf-1696-4969-b13b-2e84cbfee91b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.85']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f8f1322-c053-4ab4-9773-fc9338a1f8d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.96']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96382edb-cbab-4b16-ab62-d4254b373507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.99']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b47f92a8-16a9-4941-8384-16dfc17b9dcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.105']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e0f73d-1ca4-4856-8286-b49413949693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.107']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c364af-89fd-436f-8feb-d3a696e2ab8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.110']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--774d7c3d-eea8-4167-8506-0c01940b888a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.112']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be0e79b3-0e6c-4c3a-990f-20c535289e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.113']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c853437-cb7f-46f5-85e1-29fb645c656c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.114']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa56da59-a239-4158-9dfb-243f2706c084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.115']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e78b01b-7481-4d81-bb94-758a22c3be13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.116']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb70e9d4-4ae3-4bfd-8972-1a01cea6df23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.117']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71bda82c-2c7a-4c28-8798-9b58f40c1083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.118']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de58d122-1df5-467d-b3f3-10fdb444e328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.119']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--688080ee-411a-4053-af75-9a9a376fb947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.120']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25baf5d7-d558-4f3d-aabd-6b83176eec65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.121']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47617f0-f5fe-4243-80c8-1796a7b18978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.122']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd17af8-e22a-49ae-ae06-dee85337da48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.123']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897bb0ff-e3f1-41d8-84f0-05952c6e888f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.124']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b13e6ae-91df-46f2-8e64-d3f856804583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.125']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4884de17-25c4-4252-82ce-e9ed54d258d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.126']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54fa4b7c-ae20-40c4-8b97-64c7176baf61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.128']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c414e866-ab05-4ef8-b7de-6100503a1635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.131']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8816d6d6-e5ce-4aec-ac16-ae73f9ddba87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.133']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd89bbc-a118-4d25-9df0-1193faf576b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.134']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--affc35a1-f2ce-452d-bcfc-5b85b1fa9bfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.138']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c60cc6-4cb4-4c02-a11a-c35b1abd57f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.144']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425b8384-2593-490c-93d4-11af669c49f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.146']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d5535d0-412e-46af-8014-75ca9c042d85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.147']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a5177f-b149-4a7f-a651-d4c4db0dcf02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.148']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0efaa3a4-54be-45b1-8f11-038a9d9a10a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.149']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a05fd28-0c0d-405e-b9e9-2129583a456f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.150']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe68017-b03c-45ab-9271-038c2ee71b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.151']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9edccf9-454a-4850-b4e6-a8c0d9ec37c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.153']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a0c04c-f8d1-4927-9c16-06adf2aa0af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.154']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db08a446-5031-4c86-9f8f-70dc366a9244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.155']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f8a9fb-a97f-460e-9a12-e990a4d41b6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.156']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a7713c-5a89-4338-9712-ccf4fcdb0bcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.158']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be13a59e-e104-426f-b26d-e02c9ef1e179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.159']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24777947-f1a7-4925-a029-3bcd9142468e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.16']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f151ad-0050-4e78-ae4f-46ab0996c903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.181']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a6881d4-723d-4359-b679-18f384f13287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.211']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30dada15-c7a5-4dda-af18-cd5dcdd5bf78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.224']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e29afa-ce98-4b36-b3a7-72b8f067cbf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.225']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4887b643-b445-4e0b-9686-d9e36394f708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.226']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e503fc-88cf-4503-8a74-798df4761b92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.227']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da8cc407-0017-4569-a120-55bb121ef0dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.228']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e77dcf-c30b-4928-aa26-3bbd20dec025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.229']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81006fb0-033b-4f5e-97ad-312fe48010cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.230']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b788d459-132b-429a-89e6-b13c66e48c31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.231']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f628e94-3d4c-43e0-b53c-e421dd4f4ba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.232']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac9c89da-d426-4451-98b4-a63b152ddcff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.233']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdbd6cd6-487d-4cc1-aefa-140e8d1a7b36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.234']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ef0067-9e7e-44cd-9144-86c17c9a8d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.235']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a01aac-c1ff-4b75-9300-eaf2bd15d731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.237']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--427b26bb-0364-4910-86ea-8a9a3b27cfb4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.238']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03bbe58c-2e85-460d-a66f-93fff7058e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.239']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbca0fcb-6008-48eb-bd63-ad697ec53ea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.38']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--391113c8-9e0d-4476-b037-5c6b49075eea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.47']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac052d92-9788-4e57-9b5b-c8023854ddb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.96']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bcabc1c-487f-45eb-b3e9-77ac8b7498c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.97']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452d8d69-b5a2-404c-9323-0ad72aaa4806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.99']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d60b306-6652-411d-b8b0-1915de912c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.127']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc4b06a-fa96-4691-a95a-fbb50efbcde2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.128']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba59ffb4-65cc-4c3d-a14b-1c012f384603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.129']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a533d18-5943-423d-9b4b-4ff12d9374bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.130']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14382912-43ea-447d-ae53-bd5eeea2168e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.131']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6086292-03cb-42b0-a039-21d5ecafc48e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.132']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3f6d186-c89d-4847-a00d-3bb7927ca3db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.133']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adbc6fa8-5558-4a1d-8164-465d42beafd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.134']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f2f9e68-847e-4b23-afb1-c83a1484e493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.135']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8024be39-d547-4a69-87d6-70cc0596e0c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.136']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d51f171c-a2fb-460a-9b5a-dac54e85ba02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.137']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6caf0360-936d-4aed-b218-fa8cbe7dd65f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.138']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9922df3f-e720-419e-92c7-3457faba0e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.141']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dbeade9-3953-4364-8f2b-2c72b449e59e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.142']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582d783a-333a-419b-a415-dd84db489081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.191']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6925a67c-32fe-49da-8e25-4140ceef20f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.199']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b77841-908f-4a01-8384-4aa331e2228f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.200']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d60b38-e455-4e23-a1d3-7fe6b9599b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.207']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffb279d0-3aed-4aec-98f6-3acf09a27beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.208']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a59388f-af38-4fc2-84da-0c81cee31b70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.209']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aef08c7-4e20-4bef-89c6-db1206907eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.210']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--232b36fe-3335-43d7-ae92-61e3af2a6b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.211']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbe155df-f0ad-4bc5-b5fc-ee7827961bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.212']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d76ba9ce-d45b-4369-8037-3158335b6f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.213']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--096f4b39-2671-4f3e-b585-fa0229439921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.215']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--596dee35-456d-4a00-b3ca-2195e6411dab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.216']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a117df-5fb8-4afe-80e0-77106553f870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.217']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--193c6286-e5ff-4b6a-a3e6-bcccfeded36d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.218']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fe5512d-d27e-4ffe-ba5d-d9d8a6f37d5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.219']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deda3810-d466-4861-b489-61266625ab4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.220']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f49d819e-06d0-4785-b648-58e21d1599c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.221']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ba373ce-56cd-4369-8e45-46b32bc2d54f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.222']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d650903-3ad7-44c4-925d-58f736f89652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.223']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27774c08-e566-45b0-bd69-d8b9d92ce960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.224']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9882c7e9-8e5a-4941-bd50-c5abc2b3dc43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.227']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e6f5b6-ab24-4e89-b3a2-ed4250ccf459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.230']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67144672-771e-489b-bb4e-cea9222e903b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.233']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba2ea270-f9f0-4368-aa97-3031d36f8e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.235']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057d3d3a-2a15-4fc0-89b4-71b34a75dc27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.237']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca8ccc0-0a0a-436d-84b0-c5a9135fa94a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.238']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11134fa8-9db9-406e-9c7e-eb7419c57d0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.239']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f02ba7c9-5c36-497d-a0e5-f2bcbad3a151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.240']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2017edb4-f598-491f-88c9-509fb834a95a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.241']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b699d0c-e989-4a06-afc0-f5b7fda9a383", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.242']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bf8b014-b873-4f41-bff1-32bb237a62c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.243']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81dce74b-bd53-4e20-864c-67d8670cc29e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.244']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77bc5ded-e85b-4c2e-8a00-2a7a679e9645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.245']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d10ee6a-4138-44ff-8640-ad5ae44dba3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.246']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f137e91c-ad2c-4f83-ab2d-d60f79f3a7e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.247']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b01c40e-1afe-465d-b53d-7c592eba1092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.248']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a69e3be5-5248-4a41-8a2d-516ccfaeeeb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.249']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--009188ea-b3b3-4665-8eaa-0be7a5cf872a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.251']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d3c621f-d981-4d45-82c6-28682da712c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.252']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a09375-5d78-4f99-8b81-4910c84bc50c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.253']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc694543-7f49-4e65-8e81-97401324273e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.254']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a0215a6-fe6c-4310-8430-443a5f224f35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.111']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e48d9d47-1213-4fdf-b16b-aecd7d91f797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.118']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe5120da-c4ee-4a0d-8609-3fa854c89da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.119']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c2cf08b-3f93-4b61-83cb-6509fd8eccbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.15']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7858adfc-f526-4526-acf3-b0b749c7b616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.154']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2035c74-18f9-41f9-af8f-f090e0fe3236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.155']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c330e7-8341-4e5c-8d69-a246d8ce2597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.16']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b9c74ee-12dd-4f0b-b375-717b3514868e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.17']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--085079e4-60dc-4a59-ae49-af8f9d933e47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.20']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09716bfa-f4f4-409f-ac9e-8d9d4fe8989c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.21']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3cf083d-14fd-453f-bdff-7d7c5a048465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.22']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2686d06-7124-4671-ac02-c4c479409488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.23']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--519f2def-d144-4cea-a08d-db9f61ec94ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.24']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ded05a-fc3e-492b-a96d-b907d62019cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.25']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56cb0d3e-01ee-46a5-b986-8485c4875c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.26']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1beea0fe-49e1-458c-bac3-ad1e3c09adeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.27']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5608b346-3af8-41fe-8354-cb3cb13a1336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.28']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc07efa-965a-48a1-9e28-7154de647914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.29']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fba51a92-8c95-48f4-adbb-1dba2c2baf8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.30']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d7e19f2-c95e-4658-bd6a-0d482d637acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.38']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b66a94-d23d-45ed-ad6f-a61765912852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.43']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d0e529-e435-4933-8c27-01c60b71f9eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.59']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f85f067-3750-4fe4-aa23-d060cfbe5c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.66']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac41efd-de81-4f66-afa4-f1b25a6bfa81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.77']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--120289ba-acc7-4820-a7c7-94f5c519e65a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.91']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d86f512-92ea-4e7f-9085-ed2b55996348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.93']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99151679-112f-4896-94fc-84c03a8379fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.15']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a7c9f85-3f38-4b8d-81a5-48955b4a8f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.16']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--749684ed-5b02-4242-867d-48a778ac3596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.17']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb4aee89-a4a0-40be-bd2a-f933fccfec4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.19']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39076caf-36ec-475c-a755-d5d6c9addb7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.20']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad389412-7030-4890-b582-3d97d73a1a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.22']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--427d8839-a828-4a82-a289-044894cb9b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.23']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a43321d-9d4a-4647-8060-c9e2010cd496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.233']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f6f015e-d1db-462d-837f-32040bf3177f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.24']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d755eebe-7838-46f7-a660-9dad6a06cc84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.25']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04566307-6e85-4161-b079-1ba51ab178ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.26']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d192a04-56e1-46e0-83dc-cd2155c3b750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.30']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85aaa635-62d2-4900-9f5d-5e81cead3e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.94']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--babbc9bb-1a8a-417b-aca5-7eb142dc0f5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.77']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13159dd0-d3b4-46cf-804d-479281f7899f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.220.105']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6899ac3c-b2ce-4f53-acdc-a66d8a369ac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.98']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecca35f0-2a22-47de-a15f-18f0d034021d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.136']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb9cfcf-4103-43a8-aa77-7b7830a49d5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.62.150']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d18e2019-c285-4e26-8318-fa23229b17e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.205.34']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--010d5392-b3cf-4d42-aad6-23a9d0ef32f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.109']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9587e3d2-bdd2-4900-bc53-79e60c01896d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.69.128']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2cefad7-f099-4b7d-aa17-8fabdf0f6515", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.69.129']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e08f766-7e07-4ddf-898d-3c735be1b08a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.69.130']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f33478-0c36-43fd-b1be-7f20919a5159", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.79.172']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cbfbe4c-c747-4965-ae48-9e54e05660e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.173.4']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c36aa7-55a1-46aa-a015-7aae8a6c140e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.189.163']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--012cb7b0-f2e8-4603-ac25-dacbc114ec44", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.84.8']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--218aa489-827a-456f-a311-913dfbb87736", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.220.64.66']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb71a375-40a1-4f6e-af83-cfae58850f33", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.227.108.80']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c16585-80e9-4252-86bd-e32a476d89c9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.23.166.166']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c79604-d35f-4b0d-b076-8fd965537adb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.231.24.5']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba68c51d-7f5c-47db-afd3-0a3ce9adf881", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.241.132.98']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0feae2c3-f05c-413b-8434-d984833ea6c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.102.235.100']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ad300b-aae3-420a-9b39-a1f9b083e035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.154.54.98']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e6f4f1-3293-4d08-9b35-92e391699470", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.178.206.62']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27604add-a2a0-44fa-8993-ec062c973f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.123.81']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b17d39-e2b9-4912-a090-92192ae931f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.165.99']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16248b92-bbc2-490b-9329-c6f49bb3d853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.169.243']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9714f274-e66f-4c19-a11d-b25d02e2405e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.2.51']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb26761a-e83d-4c77-b016-2f4547e9113a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.229.3']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46231a2e-6bd4-433c-8296-2150116e2e02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.27.60']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe70d50a-5efb-480d-8ce3-57ec4b34f132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.32.240']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e02920-cf5f-469f-804c-c0ccc1c805f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.81.38']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad1c4cb-7e56-4846-aa83-5edc082f2db8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.220.58.0']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa180270-b1da-421b-a825-b6861dfda5a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.52.99']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--646d20a5-9605-4223-84e4-329dd5c1369f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.69.177.102']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40723ef7-496d-41b1-bfc8-700190ec3abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.243']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abba72a7-071c-40f4-b224-041013851b3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.175.92.21']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc0dc748-b26d-467d-9915-c37496f8e9c2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.0.120']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf1fa3e-e4fc-4045-8147-4c3aea413698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.100']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8992e776-169a-45c5-a8db-69675b4b3750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.101']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0880105b-fb6d-4821-80d7-5de48ed7e2e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.103']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64aa3284-6686-40a2-a825-a22366f5c4ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.104']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36397dba-3ba1-4e7b-834b-678a5837a85c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.105']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f17b37e-2412-47ef-bf2d-9ba8e775952b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.106']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcbecc02-dacc-402e-97d1-7fdd5af01771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.107']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04aa6549-7fab-4779-94d5-1ef25c5b8f98", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.108']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25658617-a6ef-410d-b63f-274440f45779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.109']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a673a155-1a6f-41f1-93c3-d8982bb012e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.11']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f26b5f9-5db4-43cc-8622-d6f832d971cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.111']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba59f0c-ffd4-42c2-bed8-322f2059bdc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.112']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f22e63f9-06cc-4a59-84af-e3d8cccad46e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.113']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f6b114-1ecb-48f0-b077-70d412f8f255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.114']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8df943d-9e16-4215-b899-8e495eb6c0b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.116']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--848ce1fd-b23b-4a30-b9b1-94ecbb875b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.117']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd2b437a-2b3c-4f15-b350-bd2e2be9abc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.118']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92372169-d69e-435a-9e82-6f001ed0af05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.119']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06eb44f2-5ab8-4db4-82a1-d4c69236a2d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.120']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aeaf044-447e-427f-a51f-ad61e09166c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.122']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84fe6c7b-55cb-435c-bd0d-7018f7354c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.125']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57234eb5-af7b-4985-b9ac-5383cc37e3aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.127']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f3608d4-0b19-4e05-860a-bd957cb4ea1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.128']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--604de8b3-7e6e-431c-87b4-cf4e2bc3659f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.130']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b980c7b9-cedb-4156-9da7-65f682dab202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.131']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa42f1f-071c-4395-8e74-b96ff70787bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.132']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0238f46b-bc66-44a3-9250-941cc35065d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.133']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fe85db1-2271-42dd-80a2-31c2e40e6367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.134']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8282131-c85a-4368-b415-b6d1c4315723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.135']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f5d2e9-26aa-4794-92e4-e2379232cbd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.136']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb441e7e-9d6c-4e59-8f9b-794dda1be152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.137']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d81bfa-3a4d-4eed-9f17-870f2c23885a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.138']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--309b01e6-a2e5-47c8-855e-01f90f573823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.139']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a31eee-b2bc-4b63-8f8d-22faf1b4a4b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.14']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2328806-b75b-47cb-8c29-33b513c7e257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.140']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d726651-8cda-43d6-984b-e525a49fd417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.141']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--911f3cf5-6061-401e-a751-28b001a9ef06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.142']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9f1f8f0-c98b-4a4a-b1fd-bb2e247950c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.145']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c651616d-8ac0-4de8-beec-e638e76ef0a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.147']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca82018-6ceb-497c-91d5-c84198a045c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.148']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c054673b-abd5-4310-af7a-ca8f06e2d4fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.149']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d80adb-e5c3-452d-a472-3cbfe4f8ccbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.15']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d4ba04-6063-4363-bb32-90b72abfae17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.150']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9934200-54a5-435c-9dcd-4a4880132f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.151']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa612003-2076-43f3-bd16-3875a2968f2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.153']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56cc6784-16f9-4d38-a229-f5b7699ae900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.154']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c18440-60a0-4c69-9089-a6fffa54e194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.156']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--490432ef-fbaa-4970-9c47-56d5959157da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.157']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b750da-c94a-4bf5-95b8-e1c9e746020c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.158']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3912647-930c-4b57-97b2-f6b1166405fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.16']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e7ab35-e690-40a3-87b7-f8ad10da9b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.160']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a2a7b0-5379-4109-b238-84a0e372ff6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.161']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a8b453-b25f-4461-9c79-64af76d60e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.162']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c18b0d8d-befc-4ef0-8224-26adc1f3cc01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.165']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fbff630-0ad1-416e-aa1d-562e30248976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.166']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4046f980-b351-4be2-a5a5-6e228c26b93d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.167']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c470b5-4751-49ed-ac61-485e38020952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.168']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de3523f7-70d7-4c5c-b431-c6e5753871b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.169']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f65c2d-a9b1-43bb-a990-cda0b2fc3bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.170']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8373560b-bcc6-4918-94a9-3c7df2a5fcd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.171']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--100ef1cd-6bd9-4046-b624-53b833f282dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.172']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73c2b50e-8075-4a7a-a443-936577080439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.176']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--906e7075-3fc1-4288-894b-4ba84a9e984d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.177']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--532ceff2-f7ba-481c-afad-b76bfd61ab64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.180']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f810600c-8582-4606-823e-07104f16133a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.183']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93e0b231-2d06-45ba-af02-2378e08346a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.185']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb1e5641-d468-4550-8027-a1fafbacc903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.187']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f195322-c99d-4e61-a6ee-0c5bbcbead1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.188']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b0dbe3-82c2-4b1e-b322-24c5109450cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.189']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59cbc70c-8380-4783-aea6-52907f065c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.19']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8ffbb2-1058-4d5e-b58a-310df816dc05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.191']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cecf86f5-fa35-4e01-8545-468c12796c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.192']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f14f5da-f275-4287-b139-3d9bd58cd5a4", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.193']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99bbbea1-5371-4e24-a40f-f0654515ba1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.198']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b058562-bbc0-4789-9b6f-c05a50e8384d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.20']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9301cae5-aa5d-479a-9b99-f7c46ce766be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.200']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a51f92f-6125-4139-aadd-f3b6e9972d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.201']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14dafdda-5e7f-4d73-8a99-d7ece4269033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.202']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13de5064-6327-4484-9ed2-bf0b09b4d045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.203']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab1a38f9-ea3c-4080-86ff-b5a04cee9d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.205']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caf88908-d1a9-454e-aa71-3e1d3011f39e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.206']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68b0bc6d-1510-43b3-b2d4-abc5da3b9c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.207']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--457fbef4-0255-4223-a367-902dc725ad54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.208']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f915692b-06ae-4ba3-bf08-a9a23dadd4f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.21']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dbe8be6-4567-4e40-b063-ffe7da629f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.210']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c5862d7-51f1-40f7-ab6f-d1a71d89dc65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.211']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80dba226-1dff-43b5-ab56-62117e9d5d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.212']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--077dbae6-af3c-4fde-b141-16112d4b0613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.213']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87e86b05-ffe6-4cd6-a891-d827e4b12d5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.214']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bbcb68a-1bb8-40ba-a634-69cf2395f1c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.215']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f4ae36-1e33-4ae3-8cbf-aab8f8b49ec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.216']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bc17ee6-447f-490d-b84a-13745c893824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.22']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9a95d40-da15-433b-b76c-4e55cece72a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.220']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d7604b5-95bb-447b-b946-47da81431325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.221']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4789e044-004d-4d0f-9ca9-3d3b409ca4b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.222']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d54aa247-256e-41fb-948c-c5e0b9381a49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.223']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--262641b0-a8c2-4674-b3e8-2e2902689594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.226']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2641a559-5eeb-4683-8e00-7e2217e944ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.227']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e513bfb5-2012-4f77-8abd-cbea5019b310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.228']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a1768e-98fd-4999-b2b9-5d5d125e2d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.229']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e783b0b0-8a29-4b17-ba8f-136c2abbddb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.23']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99fa45ea-0618-4f59-be00-77d9f034cc31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.231']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f965196-b066-47e0-b14a-3670c8c30af6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.233']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a4539d-616a-46e8-ab58-327e20d4f2c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.235']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae0643d-7216-4e5f-80b6-7ce18771beea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.236']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d8805d5-3d12-414d-ab45-f2e96df6f74a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.237']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4117d60-e5b3-4295-822f-87c55baa80de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.239']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59d7faea-5290-4511-870e-db30b62fdcf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.24']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c9b21d-5758-44a1-a7ff-044acf97c421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.240']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907e18bd-4407-4ab4-9019-bbc6eaad1c2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.241']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad0e7b9d-a4a6-48e0-bf3b-8cef63daa08c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.242']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d34e294a-acdc-4066-b1dc-9f771c2564d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.243']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3728271-ee4e-4990-9cec-62173b23eebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.244']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dab9cd51-a837-40c3-92d8-886feb7da317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.245']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e80dbb-da8c-48ae-8eaf-92d3031c42f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.247']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c60f1a4-e8c5-4240-9e41-f9ba8cf29f87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.249']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34fc7c73-5d8c-413f-9e13-969583378e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.25']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c7b78d-09db-4858-b906-bc610a843743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.250']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94bec081-6681-465c-a739-bac43e4cbd72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.251']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a087894-5b9d-45f2-ae7e-43047f21974c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.252']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7042d2c1-ec9b-46a4-bcea-bbe7027ecc8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.253']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c481f2-ea4d-4a4f-aded-0cc8fcbe3e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.26']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760c61c3-56ff-46c7-9135-d7075b489cb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.27']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a8e865-143d-4624-bb44-04b12c1b661e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.28']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eff04bc-4cd1-402a-ad11-c9ba7dadcc17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.29']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3b7e8a6-1dcc-41f7-841a-999d4f43a275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.31']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e3b66c-a67f-4eaf-bad7-645f96a84cd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.32']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26aa359e-d751-42a3-9973-cdc55e730309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.33']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--776d83a4-43c3-4a00-897c-22407cb9d022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.34']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e3b3203-d532-440e-8102-ae0fe3585877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.35']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34b40360-b7ca-470b-8a26-2382febde773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.36']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a58f3f0-7a4d-41e9-8f66-e44339b86cb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.38']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1654d2fd-9ff8-4284-a3e1-d8333e5ff800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.39']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f05fe9f-6281-4e5f-a2fd-c03a698e664c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.40']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--488fcfa7-1041-4dc4-a721-0d8a0db1c3e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.42']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ecfd7e2-d3fc-490a-a322-967e8813d4c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.43']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e49172e-7697-4727-b7e7-bebd02e728eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.44']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a058d40e-6e65-4e80-8836-4b872696b18e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.46']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83fec4ce-4bbe-449a-ba8a-a7a87a932923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.47']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8c68d0f-776b-4c5e-88cb-32f497baf6d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.48']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f8c7f3b-55e4-4617-b3d1-bd86c301b86b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.49']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7693478-da28-4fad-9a6b-faa272aa4f89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.50']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4094ab2-806b-4859-98de-f5f7e9e9bba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.51']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--415b9553-79e3-4c8e-bf85-fa5cec00e341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.52']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2769e4e3-d272-4d22-8482-478b117184af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.53']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a62f505b-d9d7-487e-b3f9-ca0321ad14b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.54']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08cf3db6-7e8f-48a1-b3a9-353d90dc9722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.56']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba10e3a-eefa-49c4-aa2b-252141d4168e", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.58']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--182cf6de-ce90-43f8-94f2-7e750ac17243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.59']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a37f88d-fa1d-4213-8080-6e1a7000c2b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.6']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db7ab404-b7dc-4983-848b-462e7de5d667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.60']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4276f229-260d-4a31-9db2-db695ec8e9a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.61']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b991f9-e077-435f-b12d-0b25b4634667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.62']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816f7fda-5ee3-4d11-9310-aea9df8a548d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.63']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0479d07b-7221-4621-ac1c-c2c1cf4404ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.65']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bfe20cc-946a-41ee-8a2b-c014015ac62d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.66']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad50bed-e15a-4737-87b8-3af6bac5bace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.67']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67aed092-f00d-44f9-8809-03f7edd2ec4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.68']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6bf74e5-417a-44f5-a3ff-dfcdc3a457d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.69']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2794ef33-9403-4d8e-9a8c-d0a357ef805f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.7']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1fbb326-1e13-4459-8af3-3fddf2f8b815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.71']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c66fea0e-e645-4426-b40b-6f8b60b1b08c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.72']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34e93ba3-c48d-4e81-8723-1f2efc397c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.73']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca13b97f-7c1d-468f-83c2-02bc12cbf9c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.75']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--707e8697-d596-4120-be73-8e3758d6b9ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.76']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6cf398d-d9a3-48d7-a778-ff7ed17e7c80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.78']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820cf60b-c78c-4b5b-a74f-8b60fe651bad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.79']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--339992a8-0479-41c1-b2b4-afd879b9f781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.8']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d47a294-98e7-42be-b810-c99aa119a721", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.80']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd384b3-b681-4d1a-b070-6aaf344812dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.81']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8286ed20-ba2e-45ed-b070-1aafe8cdf64d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.82']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f67a90-9273-4048-b70b-764c312e0923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.83']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ac07c8-af02-426d-a915-2c45614eb64f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.84']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd61463e-2ff0-4bff-b32d-bab57b03f177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.85']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b652c9-ee70-409e-af06-c846dab88d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.86']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93df42c-07f3-4a4b-b22e-dff27c786a8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.88']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b08b5f0-dfdd-40df-b6fe-bd4a36809670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.89']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f72c921c-acc5-4700-be1d-09ef3c77a232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.90']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59ecb975-da9a-4aef-ab75-4ac78959c0aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.94']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b8e757d-6d71-4612-bb2d-d255fcedff70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.95']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316ecf02-9c59-4c49-86c9-688304226d64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.97']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4efbfedc-fb68-4261-98f6-0f50d602925a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.98']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--594714fb-ac3e-4b2e-9824-81c46d276d82", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.7.218']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5856459-ece9-45af-8b05-66d20e0b2de4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.77.136.178']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c322da5-2d82-4eba-8734-a867ecbda526", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.81.127.119']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2988879a-6537-40bd-b445-b71725d2c0a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.211.228.247']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b29442bb-e1e8-4062-a5b8-b8f39888a75c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.204']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eabafe49-c788-4d7a-b930-924c7a206080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.230']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4322f0d5-a601-47f1-9018-f5f3f4d1934c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.231']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c3289e-ad39-4f45-910a-d03096cf554c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.232']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91264edb-6ca7-4c1f-9e0a-7b816c53cf2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.233']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d60ee7fa-f31a-495a-a710-4aa6a39a7072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.234']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d856c7-f273-49e6-bce0-f82700858e3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.235']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3973a67-168a-4824-a421-c821e43cca83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.146.186']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e16b8447-21a7-4006-9860-613672b41bda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.158.166']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab31f5f-3ec5-442d-b198-80bce6a3edf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.23']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afee7505-14fc-4718-9197-baa6447eac7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.65']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e371a3-18e7-4394-a1d2-99b2f4c23d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.22']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af2f438-9064-43eb-8c34-f6322f7f9780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.23']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98c256c3-de27-4e12-be03-afb7d6d089b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.27']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--422e43f1-3ac6-46ee-b5b3-1f4f45a6f29a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.30']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3c17e4-0f1c-4e6d-9eea-d23749ade97b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.156']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--874ab25f-af6a-4d96-8a7f-36c70c562da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.157']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24bf3c6f-e516-491d-abc3-02e59e92c9f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.2']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29d0c549-3caa-47d9-8305-dfd628d8a746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.178.148']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--580fa7b7-d1bf-4e49-8b3c-ecdfaee795f2", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.167.37.165']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ea9db93-ff51-4333-a86a-54f3205e3a0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.32.208']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6232a89e-5007-43d3-84d3-76c8c18adbd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.253.22']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac13b02-1165-484c-9830-4d5e9c74d032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.100.142']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ae07e6-c932-4161-8d2e-a8f12d7eb8a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.100.195']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f955bf-0ba7-4bbf-95cd-047e82784d99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.121.84']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff1329b-c5a4-4c28-8cd0-96dc92a76b0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.127.168']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89dd1beb-2d51-4cf3-8fd5-e720a9174a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.177.87']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e92399e6-e3e7-4779-905f-4bcb7e08a844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.78.33']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084b5de7-38f2-400c-a84e-2ed550f399ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.78.34']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdaf1f08-5045-4c74-bbef-ea79659f81e4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.175.131']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63087c85-7bc2-407b-a971-eed2c8812cad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.227.150']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d11f13-7def-4dd7-815a-702c3a384672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.16']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bacf7b3-c922-4511-a339-92ba7db3def2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.17']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab245106-8fdd-4d13-b2c2-b40bc322d6a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.21']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--496e96af-2601-4135-9899-6e79cdadc86e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.26']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e97c6d3f-f8f0-48c0-b50e-809d0236babd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.37']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f93026d6-1b41-4fab-be21-db95b6adfc13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.40']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b45d34-16b0-4aee-a61e-f7852fdf8558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.5']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8530c6f0-e262-47c9-a134-aacd1771a8f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.56']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47feb29b-4315-4eff-908b-f7a5bde7d3fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.61']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd95bb1-0dc6-4af3-aabf-b2ca0f46514d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.7']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2819e7-c271-43d6-9ab3-c49ff9ab5964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.8']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af291fcd-4f2d-40e6-84a1-a374aae5efed", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.91.224.229']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ece9079-f12f-4a71-b7c7-d16b56917e8e", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.119.140.204']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44d57bae-fa98-4230-a70a-41cacb91d196", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '76.81.71.226']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07681d8a-e702-4d1f-9b06-6a4422a99abb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.246.100.120']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--754b35f6-a640-4d6a-8406-3cd166f6d35c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.42.121.133']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e2f892c-561d-4653-821e-150f5a3d1df2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.68.87.67']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--916ac6ed-561f-40db-9477-8129422cf6ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.117']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b96e689-82e7-4354-81b8-056dfe71ceec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.197']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf55d128-636e-49eb-9f81-7c0fb62f3493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.31']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad3afb49-e50f-49a2-b6d6-3c93168d0d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.42']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7919e1e0-f53b-4fd6-a429-e16dd421efe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.54']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f80de76-8ee2-431c-bd51-d6c1b72d9de7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.94']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4324aee8-0605-41ad-b7b5-d24923577ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.16']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0718f8d2-eed2-4f2f-95b4-2dd3ee59a979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.238']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b38064a4-1a30-4c32-bf9b-0c1aeb364e37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.33']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0493f81b-8690-46a2-84fd-b5ef3d149f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.41']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2511592d-6641-4e06-9d0a-50993f29346e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.5']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64b7902f-9190-4fdf-9624-2102faf3c5ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.79']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8816c7d1-7fb8-410d-97d9-e92633b07760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.118.18']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7e6a777-92f2-4466-a485-5f75f8289ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.10']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b032ff4d-1e73-4c4c-ab5a-6583850a6f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.11']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ec663e2-f0d3-462f-b423-dffe97f4e507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.12']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5818ff2d-c744-415c-b42b-5537ddb5e0c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.66']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce515181-a3c1-4e75-8eb2-dc84c4ef354f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.67']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b26d3c-71e2-4f78-af62-23101880d680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.242']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58402a34-eed2-42a1-833a-47693345bc27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.246']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0d48a10-5ad1-40b3-9800-f4d92de0f5aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.30']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f17876ab-5311-4cff-934b-5e94d9495b89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.6']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22090fc4-a8ec-4505-be94-efcd8bdaf018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.22']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81d73d99-b633-490d-86ca-5fc3afe1ba03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.46']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1827807a-0eb7-4a33-a2d0-b4575b6ed4d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.74']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b896c6b-c874-49be-a220-21a1cb975e81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.102']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cea7c87c-3623-4cb9-b2e2-0d131b63e2e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.110']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7167c1cd-f2a8-4f8e-9a0b-ffa3be6c1615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.118']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33858d07-7b90-439f-a36e-1c9bb41bdd6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.162']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--810bb2b5-2f13-4906-a08b-547d8ffa85f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.174']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc204e11-4255-4927-83b7-3d1b407064c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.22']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e8880e-f37f-4bc8-ab17-d0e246f106e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.50']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a835206-b654-4f25-a437-a730e698c566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.58']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946394c2-210b-44a5-bdb3-90cd95c6a5b2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.130.225.7']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e65390-3b03-4204-8e68-cd1223b11362", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.177.129.185']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ecea995-69ab-4325-819a-e5d9ed8a87e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.186.158.73']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ee4c835-1d3d-4929-b048-87a6d042a99b", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.188.26.38']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe7daa26-1943-4451-a4ec-53f7c2d7d803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.110.236.232']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33bf77d0-fa20-4e37-b314-013e57c53f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.110']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c9803b-a171-452c-984e-97aff8944f94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.130']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93841a99-58f0-43f1-8c19-484689394676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.170']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14994b5f-3d28-43ac-aa22-729ed412c90b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.174']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe34764-c133-41eb-a427-22669822e674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.178']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c8eb06-96e6-4f18-ac61-9bed787f89dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.102']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46e3138e-d879-480a-9cac-75635c15d383", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.174']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8eeac8-01c4-455a-a3df-fdd3b15ea782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.226']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8efe78f6-dff1-4ca8-91d2-edaa52f22e21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.138']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f633293-bfcb-467b-87a8-adf6a45d10c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.142']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f8548ef-8e7d-4ddb-9d95-cac5a77093c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.162']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--554ab020-16f6-4c2e-9d8a-465d973abed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.78']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4774443b-62a8-49de-8b04-188a654b6aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.60.146']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4555d9e6-bf78-4f95-9428-b2ef9254ea69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.126']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e98460cc-4c26-4449-bac6-dc05e7fc77b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.134']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3361bd21-2179-494a-9091-6546c88ec399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.178']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd90a579-3489-4b28-a0c6-e7e096afe302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.230']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba8efb0-9f8f-449a-8d9e-7673ebb75911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.143.178.79']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--732c23ee-e987-405e-b09d-3d9757c41540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.76.58.113']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d5b7da-7429-4498-8264-a33936dcb461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.134.239.76']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4041713c-d7af-4fd6-b8f6-92070304ce17", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.138.14.17']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8088dd0b-56fa-4dfe-aa77-5490cf88f17a", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.138.154.105']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7491118c-daec-43bb-b939-271bf42065b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.142.178.141']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa0d076-ca1c-4666-8133-70965d7507af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.148.211.194']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8300c20d-8f1e-4dfa-83bf-caae02e82885", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.154.2.19']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3826d0b7-89c5-4d51-a26c-0ec256ae9f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.116.61']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--159ea749-a0b2-45fc-8faf-b71cd0fb4cab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.125.138']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--213c3811-ad73-4f79-b59c-746d3aa63906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.126.67']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b6b1ce6-41c0-4a81-a50b-34935c8cf520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.196.146']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2134bb36-0a18-44b0-952a-aa624094f764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.70.202']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4368cf9-eafb-4346-aa77-56d6cb2745d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.77.33']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--715de4f3-de51-44ac-b809-7305a1df1809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.12.163']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c82e297a-762d-4de3-a6a9-c6d0aba32e29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.153.127']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a565fc48-b384-425c-bc37-bdec6a5e5814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.157.244']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95221fa-07d0-4507-9c54-be5fede6945a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.162.191']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea773ca3-81e8-482c-9d6c-313b7335a1d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.17.103']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b867ef1-0216-4708-ad33-7991c4378bdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.174.175']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b39ea2-f8b9-4f7a-9eb4-6e830e3f27a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.22.190']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a748e5e0-00ef-4c96-bcec-cdd2030036e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.30.254']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44eea1b0-1884-455e-9235-fbb64383a10d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.37.93']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6bb286b-30aa-4df0-bd95-c44a952475e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.43.157']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--636db9ae-fa2c-40ca-b2c0-cfb721b0b61d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.43.218']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d4ba2c-0b67-4b3c-83f0-938af97e72f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.42']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5fb16b0-a3fa-4b78-8b82-881c565d23e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.46.83']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516fbcd7-7e7a-4151-b520-b3053c60985a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.7.229']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c84989bf-e5be-4097-a92d-9524ac2b26d1", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.213.229.126']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--785aebdb-907d-428f-8b5e-2202dd08a9ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.0.22']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61eca77-106a-40a1-85f6-5cdfdda57b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.1.118']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87eb7431-7584-4e4d-9fe9-d24023c4a459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.10.202']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e9f08fc-607c-479f-9f91-73da486d897b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.12.192']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1caaf0c9-ca3a-48a8-8f0b-617a12d24f4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.249']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d5b87ba-1a74-49f8-8a32-598382364afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.87']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d875ae1-076e-43ca-94c4-ff4835cf6aa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.124']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--893b6c5e-ccf0-409e-a711-04d1b554fb2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.127']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26aeecc6-8975-4b73-8519-117cfc02f2bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.184']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cac610a-57ab-4dce-b499-e304641e4c51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.60']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ba6e5a-10bb-4f21-99f4-71dcb6ab9fa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.103']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9a556f4-6b51-4659-9fcc-e1f1256ff397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.107']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eede5d8f-5320-442d-8dcd-c0ed12ca327e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.198']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200639cb-9f16-4ab4-b7dc-0363b13cc3dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.215']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4f11a1f-20e8-4f1b-b57b-e8578cc266ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.218']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce737349-2eeb-4c28-b063-63cc68858f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.42']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba945bfd-a39c-4ec5-a1ca-582c236ebe18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.64']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b751f5a-8aff-4716-b11e-90e785400ae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.106']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4031315-7b70-4aa9-9b22-cae721283b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.127']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abaff418-5af6-4f76-a2ae-965e52193912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.222']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4339961b-f197-4b28-9269-7a425f4064af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.252']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f81987b0-e5de-447e-bdaa-49f26d6c7bde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.136.77']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0eb57ad-8898-4e26-a36c-4e91ef6ecd27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.221.137.250']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da6475f4-ea1a-4ca1-b842-043a94b9aa78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.155.211']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f82dd0-f33e-4a4f-b673-df2d1585a773", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.14.4.190']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8554fa6-0201-4b53-801d-a3d99250d7ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.210.210.47']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f07aad-6705-4cf8-b219-81cae7cc1b65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.247.73.68']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d132fbbd-7b44-4e3b-8c62-ea7a01e79270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.76.31']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--114759a7-522c-43ca-87d4-a8fa2c4b28f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.80']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--567ae933-cbfd-4ca5-9604-988691af9b15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.70.133']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97a663f0-6cfe-4bd0-abcd-eb82fe700fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.139']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7295f3d3-37db-49e7-bd1a-3de3da47187a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.33']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34623866-7d4c-47b4-b0ed-579fc01f276c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.87.206.144']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d690b1-81d3-4a75-90e3-2e4750996373", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.164']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b778d5-f754-41f4-a9a6-685084692b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.165']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d26723a-02a6-45ec-ba67-678951a99ea7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.166']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01ae635-23ba-49c6-9189-11c30d25a932", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.167']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--323f62fe-5677-441e-b05f-a2386a2e7c43", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.168']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4783039-7102-41e0-8a19-41421d34ccda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.169']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d93aebf-e9b7-4563-9f5b-1a1effa6a04e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.171']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9de9c13-0dfa-488d-bb11-1ca96b484fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.177']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4363c600-406c-4c28-8f64-e38fa2f079f5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.186']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b0e19e-d86e-4d1a-9c10-19901d58e2e9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.187']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f047db9b-b299-4632-8f60-89ccd4cfd622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.71']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35f264b0-ad6b-4c09-b39c-903d617f6e3d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.115']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aced4c95-8b09-4774-87e2-8b8db89d3dff", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.116']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fa23acb-e64e-463b-99f2-ab142eabc5b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.83']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8a32b4-1924-43a2-a0bf-6b069d00b0b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.226']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f069fd0-1ca8-43b6-9898-5ecb54e3d058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.230']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--102b5f8d-a407-4574-86b0-a9acc53c346d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.239']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ed2d9d-8876-472a-8e97-781315aed64e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.240']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e5b2051-f1ad-435e-bb27-f6dc2f5e53bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.249']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c894b2-38a5-4835-9216-ea01952495c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.253']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--524e3879-a246-4663-9b94-b7ecbb759b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.218.133.194']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4078697-51be-4a91-aec0-c16f4931ab4c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.23.173.32']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82aed898-e057-44fc-baa4-77acfea7c0d9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.152.132.24']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f6acd9-46eb-4cd2-9838-3c13fcb79f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.153.246.240']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ebfdc2-c86e-4fa9-8a9f-d80e074f90ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.179.157.35']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a74b017f-9fa4-49c3-8eaf-fbb3d9353b5e", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.209.210.136']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab41133-1b74-4f50-8f71-725625e09253", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.151.251.67']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5accfb3b-9e24-40f1-a676-0533d8a6024c", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.22.224.230']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8028cc7-c7e0-41ea-931c-3053fbcef5c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.224.158.12']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc17857-d235-41b4-b476-e577541a611e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.246.248.9']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b119f9ba-a705-4f58-9115-0a88c9c7d2f7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.68.86.250']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96f06586-2a1b-4eb7-bb72-5f3c494768c2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.17.43.206']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb2bb47-70d3-4a00-b5a9-f4f04c1bebd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.201.20.243']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dcc1d4a-a40a-4007-968b-6aa61fdf6e27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.22.62.247']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3cf003c-b9d4-4fb9-aff1-d06c2b2ee20b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.247.138.235']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df90911-1e22-4eda-8cf5-e2ba76dfa5d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.247.141.109']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c663b7f7-7eaf-4097-8ffd-a692a70e8973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.54.3.194']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0be1e93-fcab-4dd9-804c-1abfe48a1ad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.11']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b838e44c-9210-458f-b5e0-69511655247c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.7']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd2e6e69-79db-4e87-bb6a-a05879ee5f53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.120.81.241']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2a88fb6-1a37-43f0-8835-e2ea9a27a9f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.174.201.154']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a562a5e0-eb26-4385-8771-0d9c7e7fde42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.203.47.248']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a4b0f92-981c-4ac4-ad45-61cdc7243f91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.203.47.251']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b16d87-710b-400c-80c2-07530f013b22", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.204.70.96']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a74e56b3-8dbc-479c-b3c9-91bac96d742b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.193']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c21f2b4c-c717-4bc4-8786-366cba3d8044", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.194']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36664c42-7481-4b28-9b51-c9e7ad68a844", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.195']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a7dd18-fdd0-4ff3-a53b-492347afe4cf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.196']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f03cd95a-2587-4606-8f6a-637e2c6ffe71", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.197']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cd91d89-1a14-4b0c-869d-8a6c0768360d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.198']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3482a69-eb17-4dac-9659-569453536d37", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.199']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01eb939a-8cda-4163-9dfe-438e654d2135", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.200']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fce51053-498c-495b-a9bf-720917cce60a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.201']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e53861e-5e74-4c3b-877c-736f04c8f664", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.202']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c0cc6f-f00f-470f-8fb5-13320f6545e2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.203']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea1edfd-08d7-470d-8aea-562a1c947082", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.204']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08859b46-d601-4b89-b407-5c4ab10208b2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.205']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de37fde0-a06e-4c40-b22f-3b86450a7cb6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.206']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cafc3e60-427e-4c95-a0c8-e9a067532a50", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.207']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--274c6873-ee9c-487d-ac70-010438fc9fad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.208']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40dff23d-c84f-425d-8c3c-a9f8fa89473c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.209']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de33d204-11a5-442a-9a25-666b025062be", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.210']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf9bd86a-218f-4181-abab-d5a8cc20b905", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.211']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a78526a-0791-4896-a7d4-88735314bcbc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.212']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7698c69c-dc66-4e62-83e6-4d6720eef221", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.16']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f2550e-c0da-417a-bf02-f15854ea6487", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.19']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a6f71be-8bd3-4fbc-89db-6303d9f24fe6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.20']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--828b3efb-0848-4f82-8dbe-623d9a2749d9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.23']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df41852d-a3da-4817-97e8-61c8a2ea2947", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.24']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f25b36b-23de-4bf3-b779-4202594b43be", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.31']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e580b4d-fdd4-493e-897d-a678f69820f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.215.227.114']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3f391e6-46a0-43bb-a004-44d0395bd6fa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.215.252.189']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98937c80-d5bd-42b5-83f3-236eb27033ee", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.30']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e88480-ff78-4b36-897d-c4c4122de236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.151.34']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a137c88-89e1-4d9c-ae55-0ed9879ae83b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.151.41']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edaa30b3-8ad4-47c3-8c40-4cc10d41698f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.69.240.210']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ae345b-f471-4fe5-be78-89d63b2eb95d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.90.246.159']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec69a98b-5de3-4be5-89eb-1a935a5630c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.176.100']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c84944f1-1b28-44d1-a4f8-bc7df7a12791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.187.169']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00a84691-665b-44a4-a474-ab6bec13afda", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.45.152.179']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f5b8b8-cab5-49eb-b03e-0f20bc522525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.34']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--265db731-e840-47e7-8030-35226edae49c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.36']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--054d381a-ddee-4293-ae3c-2f7b101a1a89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.38']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d62e016-5001-4772-9358-52e5c0ff17de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.44']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f936ba3-2e7b-4428-9510-621344e899f1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.106.50.56']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8115b1e0-f4f8-4709-ae5c-e25f1d4d75a2", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.123.14.241']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--572e1abb-2e1a-4b67-a4d9-16d2f72e75d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.192.235.210']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab87950e-9146-4493-8142-c39013133e6d", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.196.16.5']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5001a3a1-ea29-4cbc-b446-7435f0d88ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.237.233.79']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c7ca4f1-c65b-4580-99d1-84f1fbc8d8ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.244.93.27']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e9f581f-ef60-4451-9758-c639859242a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.155']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59612326-4cb0-4bf5-908d-5b3e04f42681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.156']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--774cad05-6d22-4416-abfa-2851cd7b4378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.157']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e1a37dc-1e58-43e9-bbaf-2b398e03f5ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.158']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dea3b11-e743-4ec3-b3ea-0f2b42ede6bd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.99.141.125']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b183ba-59ef-4d37-8989-76147a5bc9eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.63.69']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b75243a-41f8-4db7-a693-37ee71817a7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.24.117']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb7f44f9-d50b-4501-a576-d3278e628b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.26.142']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a81be5bc-2eb7-4e89-916d-69628495c8cf", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.117.60.214']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cb45b0f-9c9a-48d7-ad04-83179761177b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.145.166.198']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c72ad128-828d-405c-8595-e4030b8a64c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.147.137.144']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c8962f-8f8e-432c-9fdb-5fd98b450d72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.163.145.38']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea3e76e1-3d57-49f8-b4e1-362a34c8ef73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.169.113.243']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdcb050e-5939-40a4-b555-0bf87be502bc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.185.81.112']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c4b781-f78b-4db9-a7d7-9f4d9fa15f7d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.70']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8e1ac7-5f45-462c-a243-0375b3721718", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.8']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ea6a18-e295-415d-8497-d21ae90db258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.163.200']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9bb228-ad25-4ae3-8a0e-a2ebedb15c15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.167.131']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68712f6d-5b5c-48c1-a95c-77a596a7c3fd", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.168.227']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f8624fd-bf39-4203-95c7-eab5cdb1c413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.183']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--188baf34-0a44-4313-a33d-cfad5b04ef8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.250.170.170']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8526d6b-6333-4360-b4c6-af3d4dde56a6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.185.127']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1368bb03-cfd9-45ac-b73e-41fec4c0ac02", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.34.176.61']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ced406-e573-4527-b7b4-676db742e2df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.145']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce8d9c3c-48c5-46cb-a273-c990f5405082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.146']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1026a1e3-f1cc-4fc4-8a40-06dbd9aea2f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.153']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c30a260f-9b05-43f0-aa21-71f3230edd09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.45.13.19']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8bf753a-4111-4c6a-b61f-320f21733dce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.10.188']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80eda782-6b9c-4f6f-a2b9-d71295598298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.107.188.213']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a65a102-65c4-46cf-922f-dc199a47d215", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.107.251.73']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e637dac7-63dd-417e-8b24-077b9edae957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.150']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ecb07d-2389-4ba0-9477-eeddf7dc3c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.118']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de60a03a-3304-4bdd-9bae-11fae79b9274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.198']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4fdeee5-e2a3-448f-b678-3df1a7cf75b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.46']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d7011e9-acdd-4693-90b1-4b676f1d4293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.74']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6be6450-aeb0-4a89-9cfe-8288f59e59eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.98']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396d2c4d-dee5-4a73-b0a5-9ceaacf72ff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.106']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e8172f-9563-43ba-8769-a224e5f55ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.114']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--323239a7-0652-4298-9c72-d77505bdec3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.121']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de1ba001-52d1-4ea6-a0fc-8fbb69028e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.123']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a597b6-4348-452c-8021-5024dfd9c39e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.125']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f1e2a9a-607f-4eb1-8b13-0f24ef82caa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.127']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--136b221f-e9dd-490b-a7e3-0a01eef94fba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.177']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01eb40b8-54b8-4274-b798-6ffe97c33937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.179']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5952503-aebf-4306-af54-3a549a6eeb4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.181']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--225d36c9-87e3-43f2-8b1f-dd56a2f04afa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.183']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1451f0b9-9e39-4f4e-b7b3-d3f092ed8401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.185']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0db8ba04-086a-49c3-83cf-675bc1a988c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.187']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc033b07-d6f2-4d73-bb3a-b84c37fd7e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.189']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21d3455-2da7-4600-b603-d45bf13dcd56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.191']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f075cd-c446-4881-b8c7-0121282c6b6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.209']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9750a601-4e3c-4420-a743-755d3ef7157f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.211']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a7be0d-458c-4640-a086-275375482b2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.213']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda3082f-07c0-4543-8dc5-6e1d024aad0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.215']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f48578-544b-4fe1-8e09-6deb4e619c37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.217']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cf774ce-bc2f-441f-a4d0-0c7ede23e993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.219']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44392686-232f-4a7b-a3dc-a97c2e14d992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.221']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d2ef67-ee4c-4ce1-9075-af27552ddb64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.223']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8349d29-808a-4551-945e-6dedaf526c7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.33']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--430f4a2c-9428-48fe-868d-d98dcb2b46aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.35']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--018c7e9f-63e4-4a72-92d5-2e3264542072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.37']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e65dc796-68eb-40aa-ba87-237ddb79bc87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.39']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4291cc6a-43de-4392-b673-6e461e274dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.90']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ddc46b7-e9c4-4c11-a5ec-89f622a04096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.98']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aadd31fd-0063-4293-b71f-ecf487150c7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.199.163.52']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b75ff646-8ba2-4bb8-bc5f-fea7f1b48a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.222.39.207']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c82d58-f7f9-4137-8467-632aab6fcd1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.223.69.87']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f1e0e71-b3da-499f-bdfe-be7f34299593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.147']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f2d8a7-6d08-43d4-849f-c57d3176fe0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.32']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c30a7864-b333-4dc0-9fa4-2d5c915e1cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.1']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2178b025-28e9-4d38-95a8-75888455b3cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.11']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--309858d0-a73d-4bb1-bc8b-7bed1b7f0f00", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.116']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c70519-adf0-4708-b338-0f44e1d93c97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.121']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--245559e0-40ff-427c-a085-be12b39b6520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.123']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d1f6ae-aa80-4871-bf12-8262aaf404b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.125']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5fe677-c224-4978-9ea3-2f34a04b297f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.127']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d506ccc-2891-4aa7-bf90-15fb823712fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.129']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c70dace-941d-4ab6-8d3d-77eed86f6206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.13']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1aa5fbb-adfb-46b0-9c70-6bef88b2bdae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.131']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f627927f-8956-427a-bc7f-95e986fb2211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.133']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ca442b8-ba5f-4bf0-9c30-e27c0e0b0812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.135']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d285e9fe-160d-47a6-a063-345e1d901da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.137']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--848eed3a-d29c-41d2-8713-ef6d61d741f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.139']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e830539-8abd-43eb-bb83-9e0f6fd7ca4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.141']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--648ef77d-689f-4ad2-94a7-346aa576f20c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.143']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb2eb44-520b-4aeb-8bd6-0dd9f1d1af11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.146']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7825610-3618-49b6-b3a7-b4038b06942e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.15']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02b01766-add6-434f-9c43-df33259bdb1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.17']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf6561fc-c828-41e8-9ed3-137d6ed9d64c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.170']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3687b327-2f5d-4c52-8ae5-8659863bab2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.178']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64a2200c-6ce6-4071-a3fc-010305208b46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.185']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c98a5ff-5b55-4db4-96d1-a96113d316b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.187']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d6940be-ae37-4277-b24a-fd4309524e46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.189']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241b2c92-6bbf-4eb8-b938-bc0c7415f960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.19']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a3770d3-fb45-44a7-9999-e35e176121f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.191']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b85446-0fee-4159-9b5f-fc2215294b34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.202']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4cecd71-3ff1-4fe8-a081-38f56d3245e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.209']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6aeb08-86a4-4a34-a52a-facbc73e919d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.21']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41a81983-e0a4-44cf-9692-ea354b859a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.211']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a12019-36d8-4a3b-979c-f36ba9ccbc2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.213']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87515f2c-a0ae-48e0-86b2-60e26ac07e7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.215']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f14cfc-2cf4-4143-83ed-bc713d233efa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.226']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f0a205c-7441-47a5-9b32-02c8d5befd19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.229']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adbd5584-dda6-4f17-98f1-679705b3c784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.23']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee30eb8f-ab52-4108-acfa-caeec97cf5fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.231']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4309dad5-5c87-4f1c-a23c-00861f1cb8c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.233']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b32b64ba-c695-437a-8bdc-87162e6bb127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.235']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb63db8f-9f34-44d2-b0f0-d61d846f9bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.237']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c08df96-d64d-4ada-aeb1-5cef73317e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.239']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f772a589-ed92-4da0-95da-ceb7227abc4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.242']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ee7f0b-d682-45ac-87a4-62b5f719ddfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.249']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9002cb1-3db9-4e7a-85fd-ffb4c3b8b01f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.25']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12d43d3-6d92-4d73-9f22-897c23b2f326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.251']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a9039f-e6a7-4a17-bceb-05897dcd75ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.253']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c59001fb-91e4-491c-853e-92197cef2745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.255']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--307b629e-dbe1-4903-917a-71146502401c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.27']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--170d999f-4a6c-41f7-8c98-197f67726c45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.29']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cada7e19-c543-46f7-9918-68ffc39a6b3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.3']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f57d126-4086-48cc-a6a9-deae985067de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.31']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b5f318f-3ec5-4669-8738-9d20ba3ac5f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.34']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d138d282-c338-4bc0-baae-733802505ad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.5']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5160815a-883e-4bc0-a458-37514ec9ca0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.7']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2980eeff-d24c-42aa-b087-4259394e168d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.89']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ba857e-02df-4940-8952-4700211ebc9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.9']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbdd4e17-fd14-44c8-b40e-c6ef60f6b11b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.91']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--832c47de-8fda-4a54-80f3-57132690fe3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.93']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d25c058-1ea3-4f7b-8cd7-eed520f26994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.95']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772b5190-de73-4e1a-af5a-244f168b0a46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.1']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e98dafe-4a44-4402-9b4c-633aa20cd835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.105']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b722859-68b5-4a1c-af81-009a91a39063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.107']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e505da-9eaf-45f0-83b9-5bc95e43f119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.109']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7383f92d-e3e9-416f-975c-1f45761c19a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.11']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3020038c-e4f3-440d-9bca-9abf69958e71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.111']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca69f69-c943-4fac-957b-0e6855ef517e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.113']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56e8b9df-fbb4-4015-840f-72926b3dfc5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.115']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb6be29c-9bab-4bb4-b75e-fd78eb023432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.117']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74531a9a-a325-4104-ae4c-12487fcc3905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.119']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a4b563-b333-469f-88ac-509976769081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.129']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1290742e-a236-47da-88c5-367196a4a55e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.13']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd7c274b-4b6f-4834-b858-93daa9bae572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.131']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c152023e-422d-404a-af45-9c7d699a834c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.133']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b7d867e-7ba6-40ce-98f6-99fe9303ef79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.135']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd3391f-849c-4a3f-988d-25d7c88b3d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.137']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17aa9e28-3ffa-4ccd-a365-4eb3e5a02ab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.139']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead14f49-0c1b-4293-8432-4fef94091513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.141']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--840f174a-d246-439c-bcdb-657ea7475016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.143']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--177c2bc7-b55a-45c1-a01e-c438c98f3206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.145']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--792ec9c5-2c08-4dd7-bb7a-574224c75de6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.147']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c993f450-fa9a-421a-8d0c-b041551c989c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.149']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c3518f-d767-490d-b5bf-11ef56031274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.15']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1098bc0-6302-46fa-a39e-d09f71ea3c93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.151']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5bfdbf9-c0e8-47db-8fd7-946789cad9bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.153']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e8b434-34ba-40d3-9a77-f2b1e70306d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.155']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8533fb0e-154e-4c50-a4db-615f54af1659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.157']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ee29af-c71a-4f77-93ca-f55fd9034eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.159']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--155aeca7-7a4e-4529-bc96-f842892310f6", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.164']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d69b701-3866-416b-a64f-b0de5b0fdae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.169']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25a8f4ef-196b-4e03-afe3-f4b16e00581b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.171']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c8bdc27-0e4e-499e-9d8e-43d4883e81bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.173']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1fa8a1a-1085-46e1-adc9-0e1ceeff25e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.175']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ccfc1e1-70fa-47b3-9796-579a5417cbf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.178']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0907dbd1-d029-49e9-af94-622458153969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.194']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ae7f7aa-5775-4dd6-bab8-8f80ca55ba6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.201']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da71824-4537-4db6-9903-9f68f9c4de09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.203']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a81352-6b79-419e-b792-5ca7ebe90986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.205']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c4c46b2-73d1-4636-ac76-bfde08d4a794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.207']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7453b08f-ffe5-4504-97b1-04159f9167ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.209']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3837c62-a055-454b-93ec-e4aece4a9b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.211']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc01b16b-da6e-4f17-be40-964fb45cc3b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.213']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c83e94-f2ae-4959-b64d-86256557eea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.215']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f20f8e1-002f-4a46-84cb-a01feed31748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.218']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f064e947-19da-4577-b0e2-ebd0cdd41d00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.225']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6c10a43-3fc1-4b77-a91f-796df3c563a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.227']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a58bc465-7730-4c77-8d9b-6fe816002ef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.229']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--254708f5-12d9-40aa-b535-4e978930498c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.231']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d9188e6-df7d-4fd8-bb67-cf087b2c727d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.233']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19e9aab-e875-407c-9225-97aaf557c298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.235']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d195a5d4-75fe-4381-a835-098d8b256bce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.237']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d811c82-389b-4795-b82e-9d1f6de99b48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.239']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd78b413-7326-495c-a279-ae7a40923db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.241']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38517112-004f-440c-a8c1-ac6089141c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.243']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a81ff8d0-bd66-4e65-a804-15f734a58b78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.245']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79836c2a-8674-45fa-8497-41469453e914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.247']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e5dd4d-8595-430c-a9e7-61c949bcd785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.249']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52884999-42bc-4c8a-b3aa-7eaaed5980aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.251']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a1e979-f96c-4a61-8769-195a38f4027f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.253']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8c8678a-f6bd-49d0-9c4e-72ccbbd3dc35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.255']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0375df0f-6868-408b-9108-9d674fbc97d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.3']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a84fefc-d42a-407f-b941-22b5242a0dba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.42']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--115cf496-7f19-42e0-acfe-69cfd1351a60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.5']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68621e56-991f-40fd-991f-0e202899e7d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.65']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40882b24-2510-44de-9911-b6a64577ff7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.67']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f1b5def-a177-4cf5-8d87-523627b36b00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.69']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f11b59-3a88-47a1-8a1a-f2ddd1ac98d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.7']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ded2cf4-c073-4f58-9080-321071a5023b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.71']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20be8a7a-3b3c-46d1-8db8-8969b7038ffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.73']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7175c4f4-f29d-45d6-b761-40027e3c4c23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.75']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a2bed8a-305e-40b4-a8d0-559a3086f63b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.77']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--034d4dde-cd10-49ea-a5a3-209bfcd505fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.79']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--620cd178-1fcc-4282-885f-ca07d333ab60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.81']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28583111-a20c-4d53-b06a-2ad5874afc73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.83']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e362f31a-cef2-4388-b241-9b0039dbf374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.85']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38438d7b-2100-42ef-8fed-7a163bd3a964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.87']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aedfde12-521d-444c-9de6-3bec978ee1bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.9']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cfe3437-35fd-4a10-a143-bac7ef6851f3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.237.124.234']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77cad3f2-39de-4da6-8b42-fb8ec68569c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.244.219.223']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad93dcd3-9c94-46df-8ae6-7a2bbb2a89a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.243']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b91bc97-760f-4003-a170-bab0e4b6b16b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.28']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8fb7bde-ee7c-419d-bda5-1ed436709ce8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.112.126.183']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5365399-95ac-48c8-8775-842298ff2590", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.236']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b37774-cad9-49a6-8174-cb80196dbdfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.74']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70107ff6-d7e5-4d49-b888-e0b204caa692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.119.178.3']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bdf4d59-27f1-4269-9e4f-26a98c3f0302", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.205.16.30']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fa86071-94b2-425a-ab7b-b3421a3957bb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.205.29.107']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f97f24-72a6-4dac-a3dd-ee9f745b615a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.222.22.61']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d950b2d5-e1bd-4c3b-9f8e-fe5f060b7264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.5']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84de15df-be04-4eae-b38c-12974df068af", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.109.125']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db5cba5f-a410-4a37-be5f-1c4765c3257e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.72.166']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac5ba6f-4bf2-48ab-beac-31193ff2c3ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.93.12']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc428d07-7b89-4270-b590-2f6d78e30062", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.48.24.181']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e724cdf6-ecc4-4ca8-b8ae-910823c3cc74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.91.197.38']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a90386fc-babe-49b8-a8be-57d2215d8579", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.101.184.145']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81579a04-7cec-49cc-a1ce-5356dc44e56f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.148']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0535dbd4-119a-4526-b986-24ed89ccdb33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.193']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3f27dd5-9108-4ccd-8168-1d68ecf6f46f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.55.16']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa049ca8-89f8-4747-a469-8234f9956ebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.10']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946a35a3-4f8d-4bd7-9126-74288d235a87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.250']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86eaea6-190a-433b-b0f8-970ad4fc49ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.30']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3132b39e-a654-4c5d-85f5-953b60240cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.130.170.146']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--813538d5-6acd-4c88-bc0e-6e92f9472a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.155.151.16']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41295251-f43a-4f8b-b651-6e0da4f8e87a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.181.233.6']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3ffe431-54bb-4504-a79e-85cb20d6ce55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.52.233']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d920f8e7-adde-42fd-a1af-15429fe5baab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.53.157']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--614a8744-a77a-4a11-9c5c-db1f135e5b71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.54.37']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--823f5d5a-edda-4e7d-8481-96ea0c7db76d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.55.77']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f20fbff-6e2d-4960-93da-81a14a41960b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.215.0.144']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1baa21a-492a-449f-9c6d-5a467674155a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.240.192.149']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df639d2-e797-4c35-8579-3dae10fc15e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.54.110.236']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcafce94-bb88-4eec-ad51-485555624974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.87.231.131']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9086e65b-13b6-4044-ace9-6e75b1b76a11", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.125.170.174']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21bfef12-fce2-434c-9349-5319d9ca0135", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.125.170.85']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f288af62-89e3-458b-a7d2-fc2c899d0cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.101.34']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6fab49b-7e56-48a9-aa8a-400e64ffc5f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.98.20']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a9f4d8-6ca2-414a-acc2-6052293949b6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.127.146.46']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca8589f-7aa0-4c7a-8590-66ff67ebe1c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.133.213']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5941823b-fbe1-44f5-9440-c7073312e722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.141.150']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a10c38c6-28a4-4856-8047-e414c5a929c7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.74.6.204']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa7669b-16e1-4ee4-93d0-4106f8cc927b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.159.37.115']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4575ec99-cac3-4844-9a4b-9c57fb485978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.70.35.40']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93bada7-e211-4893-909b-cb0669a838a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.98.171.72']", "pattern_type": "stix", "valid_from": "2026-06-02T00:00:00.000Z", "valid_until": "2026-07-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f7c20a-4cbd-4164-af62-e977cf86ed95", "sighting_of_ref": "indicator--48e68965-daf2-4687-97da-28ddaa1b3063", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f00de3-362a-4811-827d-8e98bd615e66", "sighting_of_ref": "indicator--cb2efb15-aebc-459b-a64b-27e76198652e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c272be2-555c-41cd-bbad-ce4b3b4632a6", "sighting_of_ref": "indicator--c359a99f-b682-414b-9731-3c63a86c9b90", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--200593ff-cbba-441a-9e3c-b7c395f9de43", "sighting_of_ref": "indicator--5afe2479-8104-40da-9ba2-211419cd8d0f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea26bf6-7d83-43ef-ae13-8d27cc8de4dc", "sighting_of_ref": "indicator--c9500f18-1fca-41f2-9641-7a4e9ebb017c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8dbdf88-bd0c-4f77-aa04-82bdfe25173e", "sighting_of_ref": "indicator--dbc0f955-06c9-464b-8b7e-f68516ea720d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c353fa-4e85-4266-af51-72c8da405153", "sighting_of_ref": "indicator--d3f53f09-3a8d-4718-8863-166e60f9a984", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25749d6f-c60d-4fd9-b27a-cd2976b82b9e", "sighting_of_ref": "indicator--3a134ad8-2c30-4b6e-a666-ba54767db8fc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d538965-7133-49dc-b491-4972623113be", "sighting_of_ref": "indicator--98fde59a-3f8e-46ed-9bf7-32740fc00ec7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1cd60e-a89f-45b9-868d-cff4ca056338", "sighting_of_ref": "indicator--b9d2adb8-fef7-484e-a7c9-b81a23cc9ac0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc4dd41-a820-48ac-bd1d-ca6489235e3a", "sighting_of_ref": "indicator--3a59b826-cf02-497c-b81b-7201920d6d00", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2694df13-a241-4d98-89b0-60f243b43506", "sighting_of_ref": "indicator--cee95e42-53d4-4076-9de3-4164c1292edf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d82c64-8ea8-494f-93e1-d60499c1def7", "sighting_of_ref": "indicator--31589cc6-4625-437d-bfb0-b251b341c9d7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58f5084-f505-4376-987d-5f64f285a424", "sighting_of_ref": "indicator--40faf87e-795c-4d58-9f9b-b79336b68155", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28092981-fdeb-432d-96eb-0652edfa42a0", "sighting_of_ref": "indicator--7223e17c-2ba6-429f-b39f-09a02eca8688", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a0d4dd4-64a9-4111-b7a9-b25a0990e77e", "sighting_of_ref": "indicator--252aa593-6194-4178-8838-0b6c9d1fb1ed", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d0c503-1569-42dc-b2dd-5616cacf9644", "sighting_of_ref": "indicator--a7d9d6d8-2865-4b83-b3d8-2488c3f98e97", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d1c084-6604-48a2-b198-374b3f981abf", "sighting_of_ref": "indicator--86d8bda4-92da-4879-a309-e20e658b625c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb0ac34-e325-4ada-9c24-b87bc9307bb7", "sighting_of_ref": "indicator--74843b6f-348e-4eb8-bc6d-292456b294ee", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f5bbbe9-4687-44c1-a1ee-d2ce5ba1a794", "sighting_of_ref": "indicator--dddb5bb0-7da7-43d1-bfa0-4fbc2b8ba86f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a977e4-2e2f-44fb-bc37-dbb1b900fbde", "sighting_of_ref": "indicator--37a6669b-d78b-4cd1-a0f9-db8ce0aa32a9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1679305c-b46a-41ee-825e-2cc142648fee", "sighting_of_ref": "indicator--c3503095-5c06-4b4b-a7f1-5a43e0103a51", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ac2018-97ff-48cf-aa4d-076c879ec4b0", "sighting_of_ref": "indicator--7043d13d-3670-4141-ad5d-a2589a710d34", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65701ed7-904c-4226-897e-bb6b34fc8ebb", "sighting_of_ref": "indicator--623fd51e-136a-4230-ab0f-ed28786cbb4c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26fab873-5a9c-4e4d-8303-fd0258615634", "sighting_of_ref": "indicator--a5de548b-7c8f-43b0-aeb0-72ca6ef7d09c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f06a25ea-76ad-4852-9149-f24d452f3620", "sighting_of_ref": "indicator--a46ab5be-c963-4ba9-bbfc-0c40dd5fa21c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd4bcd4-54cd-431c-b415-f44c3f4313be", "sighting_of_ref": "indicator--cdb002c0-ea1c-4b2b-85e6-515241be4fde", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35711ea8-144e-4b3c-8e36-e3be0e0a7a5a", "sighting_of_ref": "indicator--ee92d9b4-ee65-4202-8260-3b729b2a2dee", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4424b02f-b0a7-4e54-9c03-c23b0ee5cc97", "sighting_of_ref": "indicator--3a40d668-1936-42f5-8d18-6975e0bdc074", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7db48b9-ca9b-41b9-aa28-753f58d44f0a", "sighting_of_ref": "indicator--9efb51d5-a6f1-46ec-b562-7b61ab835653", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f15fd75-2932-4857-89dd-1ba2ff2704a8", "sighting_of_ref": "indicator--132b223c-94cc-49d1-9ae6-877a68417712", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ee0161-03fd-406d-8132-034b8a869271", "sighting_of_ref": "indicator--53f4ffb1-59a3-488e-b665-fb8f4ed3ed37", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e4e2ca-2227-428a-97d6-b064c9562472", "sighting_of_ref": "indicator--8af032cb-e6ad-4af6-91d4-e72e652efa21", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df52026-7ffc-44ef-ae70-9b26d0fa5c48", "sighting_of_ref": "indicator--b0d7b3ef-3eb5-4b05-bbaf-6ca1f084a08a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34053694-e90f-41a2-9126-019bc5e7efbb", "sighting_of_ref": "indicator--f465d6e0-3871-4a8e-93d8-5fe85c9f993d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b3c0097-e782-44a4-bdd4-54bb563c1629", "sighting_of_ref": "indicator--d794cc0c-3e2e-472f-a4c4-c09423bdf7d7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0359b49-df49-4215-961b-bdc411a362cc", "sighting_of_ref": "indicator--24e75f15-8630-4c14-ae27-273b65224b0c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272a9a6a-2921-4b46-93ed-830435389b96", "sighting_of_ref": "indicator--5ff04b28-6b31-4fc3-bc73-9bd0fee91422", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b646c6-e332-4d69-ac87-ac47a4a84605", "sighting_of_ref": "indicator--2950ba79-3a2a-4fd4-800e-592333e76295", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c274b2-d458-4831-ad77-daa23800b657", "sighting_of_ref": "indicator--fa60bc34-8118-44d2-94ca-17bc228d8793", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44711b71-bfba-444f-8a3e-1d12f3564884", "sighting_of_ref": "indicator--17694b9f-21ba-473a-ace6-571ddd63f0d7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e61920f-bd0e-4c59-be71-7f5e93aa1d34", "sighting_of_ref": "indicator--b961457e-d4e4-4759-b959-b9cc7d85a0dd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a524f1-4545-492f-ae2d-3f1c6458897c", "sighting_of_ref": "indicator--8faf6735-2050-4161-87cf-67d80d8d8e59", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a31482f2-c7dc-4947-9870-ab1090af7d68", "sighting_of_ref": "indicator--60a68eae-8933-4b27-9dee-05cb5dc311fe", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf708f62-7546-4b76-b836-cc984064bd69", "sighting_of_ref": "indicator--3f20a66e-1cd4-4ceb-b05f-5c3347e04474", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56bb7ca0-de86-4e9c-af5c-87a5bc4fa5b6", "sighting_of_ref": "indicator--232998e5-d4ce-4876-a666-cd197fb3b523", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5951029d-c8f7-4103-a2b7-1cbed6814852", "sighting_of_ref": "indicator--a67a33af-e1e5-41d4-9455-ce553002d91e", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b907642-7d48-4034-8963-ac316f63d1d4", "sighting_of_ref": "indicator--e1fb3965-025d-4f8f-93be-2d211b8bba34", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9fa544-dc10-47ff-b227-8de38b168871", "sighting_of_ref": "indicator--3c9ef9fd-fa6a-4600-b4f4-af9bbff4a52f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff4aa8e-9447-4605-a25d-6910a0d5e240", "sighting_of_ref": "indicator--60856352-0048-4bd4-ad90-27da49a4ccd3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5823738d-54fc-4b56-9419-a1977248ad91", "sighting_of_ref": "indicator--dbc447b8-57ef-4d21-b317-04e5a8fd9483", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--870f9654-3066-46dc-a92a-22f5b4a3f4d9", "sighting_of_ref": "indicator--4cb24b2a-f350-45ec-b7a6-cbaad2dde3ab", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2a5217-24d8-4a77-8178-92f86114f9e3", "sighting_of_ref": "indicator--a182c159-c7a9-419e-9512-bd5b48122830", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f7316b-5a93-4854-9a2a-ab336011fb34", "sighting_of_ref": "indicator--ed9ab14f-9200-4026-ab19-182a952b9614", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--825a2cfe-01fd-4c7e-8bb6-d7553303fd35", "sighting_of_ref": "indicator--a7642a2e-07e0-4b2d-9755-c3cd123e1244", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b2ce842-8e50-4729-a93f-a27cb0a1131d", "sighting_of_ref": "indicator--7704fb0c-c7dc-48f3-956c-ddd08d607e77", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d355bf75-845b-4ce1-a7bb-d1eb5e4844d6", "sighting_of_ref": "indicator--9c71afd5-517b-4930-80a9-c0620492b84d", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffeaa24c-1ec4-4174-beaf-ab571e2bc78c", "sighting_of_ref": "indicator--4f3be993-ea3e-4d49-a3cb-d5b87a4e43ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275c00be-5e8d-4eb3-a1df-9b35bc91c7d4", "sighting_of_ref": "indicator--1842749a-6a96-480f-88f6-6c0f67a0164b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd895fc1-fbdc-4237-951e-79ef96a9b745", "sighting_of_ref": "indicator--abf4a7b2-af9a-4289-9922-aa38b2b97a7d", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68633a0f-d3aa-4872-b54f-80e4fa597c1d", "sighting_of_ref": "indicator--642871b4-0cf8-4111-8af3-7b36308c8547", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e99a8b-c72a-47b6-9902-581d4c326577", "sighting_of_ref": "indicator--bd7d5af3-98bc-4ff7-8476-44c48178a8b4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3fce90c-3344-4de7-ac77-5df25e0c7c82", "sighting_of_ref": "indicator--ea5cd402-00ac-44e4-b4ac-cdabac33bd16", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a991a68f-c839-47da-977f-0c14628a6c2a", "sighting_of_ref": "indicator--a5e3ecc8-fbe2-4632-8971-ed08982a9df5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62951369-b7d7-4028-8de8-1c3fb1dd456e", "sighting_of_ref": "indicator--f254b686-fbf2-473e-ad0c-f622204481b9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1e5bc4-c312-4119-8e71-4095b21bd126", "sighting_of_ref": "indicator--cc6e10b5-a6ba-4fc3-b251-72abc71f5473", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e42a149-b71f-472f-a449-f9849d6833c1", "sighting_of_ref": "indicator--e9f7a6a3-805a-4ffb-9c7e-5d6a55495665", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f95741a-274e-4734-8a41-8f00bb0ccb2c", "sighting_of_ref": "indicator--e9f7a6a3-805a-4ffb-9c7e-5d6a55495665", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--341d37b8-a84f-4641-812c-79ca241ecb2a", "sighting_of_ref": "indicator--59d7a3e9-3143-444e-986a-af158357276e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63df314c-b586-45c9-9d1a-40bb046b68cf", "sighting_of_ref": "indicator--15b02218-31d3-4842-96d9-3536259354a6", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1229c4b3-0ebc-422e-a22a-190b0bfce515", "sighting_of_ref": "indicator--15b02218-31d3-4842-96d9-3536259354a6", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78691fb2-49a1-42a2-9b8b-2fb090b92420", "sighting_of_ref": "indicator--03596420-be9b-4adf-923c-9f66da66ab77", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dbef737-d41e-4d6d-9cd9-23e85b0626b4", "sighting_of_ref": "indicator--cf411c4a-41f6-4360-82be-9332cd3c19c6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b058de87-be57-44d3-aa75-482d7d476005", "sighting_of_ref": "indicator--4bef1dfc-83ab-47c9-81b5-52bcb3fbcc55", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94323f78-21f3-411d-a51b-2584cb2dfb90", "sighting_of_ref": "indicator--e86d99ba-d238-49b3-9c4e-b4d3d6d30ef1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62138d34-58e8-43f6-b195-73c79367ae4a", "sighting_of_ref": "indicator--4fbc1c2e-da01-4f25-92ba-c60a622369e3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aab9747-1822-4ce6-9fde-b3a4d2b57f65", "sighting_of_ref": "indicator--6dba18c4-9eee-4c61-94b4-a39bbf75bb04", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7efc1246-5403-4a79-8c6d-a4ae4036a951", "sighting_of_ref": "indicator--d0e677a3-34c7-4a9b-a452-f66ad20a0d9d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9aed24-f313-457d-b85e-2f385391dd1e", "sighting_of_ref": "indicator--5d91b303-76cb-4ae1-836d-672c379281a1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02a3c14-ed24-4aed-a532-fea752b8b666", "sighting_of_ref": "indicator--e59adce1-cd0a-4e5f-8680-499d72a0224e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e020ba-155d-45e0-9800-1ecf9aff2736", "sighting_of_ref": "indicator--cca8f1be-139b-4e5d-9723-1b111d23b96e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65221eea-8c5f-4175-9f67-2520f56077fe", "sighting_of_ref": "indicator--174a91b6-6aa0-4e4f-a8b2-510db01c3a79", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48602e25-0392-4cc1-8f6b-1db82ca142ae", "sighting_of_ref": "indicator--e18cca0b-2d71-4ad1-812a-6ab18846eb9b", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce79758-4e7e-4c9f-87cc-21f03e7edfc6", "sighting_of_ref": "indicator--a4b7c0e5-245a-4d94-9ff7-5865ef86ae9b", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9db6f76-2424-4942-96dc-9dd4070d379c", "sighting_of_ref": "indicator--c0d758d6-0987-4028-91d4-eaf0f904c33e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12514811-d71d-48ff-9f5d-f77b61a26b7a", "sighting_of_ref": "indicator--f28346a6-54e9-472e-a02e-3d3317a7c2f3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc250059-2638-4eba-8d0e-87f6dcfd6705", "sighting_of_ref": "indicator--b07918f9-8a6e-4ebe-a1b4-b87be9dfde97", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69aad354-dcf5-498a-ac09-2547708f758f", "sighting_of_ref": "indicator--bdbb59bf-0b12-4f11-b6cb-45c1a4cae31b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1540b5-14a0-4a5c-9211-a1546687a388", "sighting_of_ref": "indicator--4aa838e9-c358-4417-ace4-9ec0d2a0808d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac29ac9f-e246-46e6-b34b-bc91b8d99641", "sighting_of_ref": "indicator--a927c1fd-8d0d-4ba2-8909-d4518c4e870c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd98793-41e9-40c2-8226-a8f61c5e27d1", "sighting_of_ref": "indicator--9caec443-5881-4599-b482-0c7fe2b0d325", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864cf512-8211-47de-a2b8-13c003ad2077", "sighting_of_ref": "indicator--f2179b38-c748-4fdb-9721-0af05fde9cce", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--861fbae0-929c-4353-9db0-d10e6a7a215b", "sighting_of_ref": "indicator--5d378d62-372a-42fd-b816-ed37d007adc4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e7c0202-b7f1-4811-850b-166625b85621", "sighting_of_ref": "indicator--e3ef8c24-111b-4f45-8d5c-07deee7247ec", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e28ab8-d4e8-4a4c-b82f-91748f77647e", "sighting_of_ref": "indicator--5725a160-b6e9-4cf6-bead-46ff439d61a4", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473dd2b6-0d2c-4cb8-8b80-b20f97f3a0e7", "sighting_of_ref": "indicator--e9fe3a72-a9f0-4e10-8997-6b6e69409aee", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409fc820-33b4-427e-9e30-71d40cb2bef8", "sighting_of_ref": "indicator--1c8d6d8c-fb17-45e8-bd7f-f78391245ff7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0320657e-7ed2-4eef-acc3-293f3c8fc680", "sighting_of_ref": "indicator--8f390f3f-4bae-4dd2-97f3-214fd8bea67b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d8f286-a3c6-41fe-837a-7aad1af09e61", "sighting_of_ref": "indicator--aa28be57-787a-4658-897d-afca58f70398", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa133dd0-3c73-43ac-ae6e-f03f2eeb7f65", "sighting_of_ref": "indicator--75d5e453-1144-42db-bbac-e9cf612e6f7e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8498a916-6950-43c5-a529-d568b35d76f6", "sighting_of_ref": "indicator--f9585ae7-ee03-4564-b800-b63d9be2477e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b7f51b-9bdb-4341-bab9-47e9a5579ede", "sighting_of_ref": "indicator--2f386ace-13da-4e6d-a935-112be5f187ef", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f089bbb-d857-4330-835e-d1f6bbf51e57", "sighting_of_ref": "indicator--726c3987-b2ba-4c28-9b21-97bee894a89e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef3d966c-df1c-48ca-b4c6-76c3083eb80c", "sighting_of_ref": "indicator--f8f37812-bef7-4370-8c7e-9e6e51780f29", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5acbe81-4908-4083-8f86-499a273d574b", "sighting_of_ref": "indicator--805b8466-3269-4f47-8dd7-dbdcfd629e85", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9b5ba1-a7b4-4bf8-8bae-8cc28eb3ca09", "sighting_of_ref": "indicator--34d0f58f-8826-40c0-a178-91b9db19d831", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e497a24-10c4-4057-a8be-69bc6c35260a", "sighting_of_ref": "indicator--34d0f58f-8826-40c0-a178-91b9db19d831", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48a7e91-4858-451d-af73-7b31f2abec56", "sighting_of_ref": "indicator--024a6ebf-e939-4362-bf26-d5b3e3c5144a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879c3f2c-0877-413c-956c-6d6ad1125468", "sighting_of_ref": "indicator--1999ed0d-cd0c-42e7-84fe-3f4889176889", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce32824-140b-403e-b4df-e9e5f840ac3f", "sighting_of_ref": "indicator--86728914-aba5-4805-b165-c2893881d5d5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b07ee12-5a31-41bc-a93b-b45e7115c7a9", "sighting_of_ref": "indicator--1e42724a-e4c9-4985-9de5-32895b0ca863", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b595219d-5bfe-4724-9bba-ff64eed36a05", "sighting_of_ref": "indicator--3e245582-b1fe-4919-8408-9d954eef4b92", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f6f12d-fea2-4948-b1b5-e8cbc3b64bb9", "sighting_of_ref": "indicator--d18aec52-57a8-438a-b9ab-439f5aae839c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6c2d74-589d-4386-91f1-7ebd4e7ab270", "sighting_of_ref": "indicator--0c03cf2b-44cc-408f-b68d-528a4ad0b603", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7855ae7-48d5-413b-ad00-5a97f1100a5e", "sighting_of_ref": "indicator--17a60827-add4-468b-b522-2b04a2c3d00f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d86ba483-0db0-4af7-969f-2d78c3317d83", "sighting_of_ref": "indicator--4691a72b-598b-480a-bf4e-923942f786ea", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dadbc5a5-7d52-4453-b2a0-60fe9d65c987", "sighting_of_ref": "indicator--9dd6d2f7-8a51-4ae7-91f1-a43b0133bbdf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5903382-07fd-49a3-9469-43652e27d18a", "sighting_of_ref": "indicator--3a833907-d690-4f27-a94e-fc6a55913f18", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d499d6d-0f58-441a-9693-f435272e288a", "sighting_of_ref": "indicator--62523788-613c-4a04-ad5f-bae1ee027e55", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--392a3927-11b2-4758-ab88-d02c492afb7e", "sighting_of_ref": "indicator--6d2d33bf-67de-495a-98f5-e1fef32e5f85", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265c92c3-aa60-4b8e-88af-fcd275b1ac9b", "sighting_of_ref": "indicator--6d2d33bf-67de-495a-98f5-e1fef32e5f85", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--474f3767-5abf-4658-8d21-590f715ca418", "sighting_of_ref": "indicator--c46516da-199d-4623-a5c9-592fb3f46a87", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e4a61fd-2ac2-4a9c-9c5d-68df6c99dee2", "sighting_of_ref": "indicator--41aaf08f-3328-4550-b693-99bfbcc98d7b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c87ad99e-d2c0-4acd-b019-ae7c496808ae", "sighting_of_ref": "indicator--6ec31b91-1b06-4404-8a25-6515d1ab8820", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f637d0c-9d1c-4959-b1dd-d16ed35f683e", "sighting_of_ref": "indicator--3d67cd99-658b-4aa1-8236-a2b0a1b3e355", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1642ae7-b234-42fa-8676-e3e6155229c1", "sighting_of_ref": "indicator--0922c8e9-4ef3-487b-8fc0-806cb6a0415c", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02eb3146-87f1-42c5-aa4b-40fefe738a9b", "sighting_of_ref": "indicator--d1c02297-006b-43cd-a433-8fbc78aaa69c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a88665-893b-4b68-9286-4454e342c923", "sighting_of_ref": "indicator--03b8cc7c-bf5a-4290-9f9e-3e94e13b4d9e", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92f71e0-e11c-4024-b5f4-8abd73c5b027", "sighting_of_ref": "indicator--248f82ba-92bc-4a96-ba7b-c183f38f9289", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb5f602a-0da0-4e08-998b-f13c57952e4c", "sighting_of_ref": "indicator--9f0df2f0-d24f-4a8c-bddb-e2b1959dce4f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecdb25db-a979-481d-a6aa-0e2d7911db55", "sighting_of_ref": "indicator--f0deffaf-6730-4cff-91e1-7db287653228", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a8d56b-03df-47fb-a164-61318d34abd2", "sighting_of_ref": "indicator--49525082-81d7-42eb-802e-4c88f8b0caa4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6846013e-5db5-43ee-89f5-51cd46443f33", "sighting_of_ref": "indicator--1b10ff3c-cc6d-4bdc-b364-9fbcc43f4d1d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92893fe-d8c1-4580-8f40-4811438cf686", "sighting_of_ref": "indicator--e7786e83-b421-40e8-adb1-0dbfa28edbe0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a7f134-f9b1-447d-853f-69fcfbdd5d6b", "sighting_of_ref": "indicator--4568c1a2-2052-4620-b3db-b745076bd15f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3d9629-7cc7-4033-aa97-8db8177441ad", "sighting_of_ref": "indicator--d3423c0a-1450-4f40-b583-33412b969389", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9010688-8c63-47cf-a9a0-c2c9af0219e5", "sighting_of_ref": "indicator--8c5e4d26-bd1c-49e0-86d3-c0c4dfdd0cf8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4900af5-40a5-4326-97d0-d49972e0e814", "sighting_of_ref": "indicator--58a0fae3-89a3-4d13-b8d6-56317f56890d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bddbc589-391b-45c7-92d8-c975cea4f5da", "sighting_of_ref": "indicator--4f4d6a5a-5e83-44d3-97aa-ababfed2ac91", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8474bc4a-faed-4ed7-a769-f817e20050a7", "sighting_of_ref": "indicator--4f461fe7-48ce-419c-9d33-6ccf285ef3dd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d58fb7-6872-4b25-98d2-ad6bbcaff037", "sighting_of_ref": "indicator--d81bc830-eb6b-4fb3-bd0b-dadd2ffa9340", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac579550-eecb-439b-b5a4-fd0ed9d7bee4", "sighting_of_ref": "indicator--d78fa157-c99f-41e6-a12a-5995d0d820a8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b53df7-604f-4bc1-8fc8-bacb21e71479", "sighting_of_ref": "indicator--667265ce-8ffb-459b-b6fd-397db5f732d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78fc3a87-7597-4e00-aab7-6411a73ead90", "sighting_of_ref": "indicator--aa8cd0b4-319a-43db-a286-4bbc9c275f40", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a419ad-694f-43a0-9b99-732f347f2422", "sighting_of_ref": "indicator--06c714b0-32a7-4ac6-9daa-a3e5d0f11478", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c98712-3a80-4de4-83b2-4f16e8a00c44", "sighting_of_ref": "indicator--0c0e9dec-3ba2-4033-861b-08ed7a2f3875", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c19ca108-b8c3-41d2-9419-f1f07d219080", "sighting_of_ref": "indicator--0d6c5552-b0d1-4346-b5fe-240d35117208", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93068f55-4547-4a9e-a032-a8a84ba1b867", "sighting_of_ref": "indicator--0b45501c-d3ed-4236-aa02-84b26f27a844", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e65bbe-a257-45a4-a1b6-6819c80ce674", "sighting_of_ref": "indicator--5409141c-3ab2-49a4-bd18-61cc297d12d1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb6b15e-9e2e-4d34-a68a-405b0a6f3f1a", "sighting_of_ref": "indicator--d0daa4ff-fc4b-4390-ae74-cafcce88e8bf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8803478-a2b8-4340-840d-bdc13d04ca9d", "sighting_of_ref": "indicator--567f4b6f-d7b4-4bc9-a512-d0fac65c9fce", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc79b2a0-5bc5-4d82-b55d-fa1f9b4c7452", "sighting_of_ref": "indicator--97503a87-08a1-4b82-bbd8-01ccf70869d7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966f985d-66ac-4e31-b656-e3bc396e0e2d", "sighting_of_ref": "indicator--cefb3f0e-1434-4f65-922a-569519465664", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d74b572-e3d7-4cc6-abce-771b0923fb19", "sighting_of_ref": "indicator--2ef2d43f-f118-4f6c-a6bb-55c29e1a89af", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0638662-7f37-468e-ac27-44072b55d21d", "sighting_of_ref": "indicator--556c93c2-741e-488e-97ae-acbcfe408b0c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74684bdf-8b2f-4169-ae8a-7ae74feda5b5", "sighting_of_ref": "indicator--e0c9b840-d4ff-48a7-b6fc-b8d2311be77c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e96bf4b-355e-4581-aab3-487d280aa18d", "sighting_of_ref": "indicator--1612be58-f881-4272-bcf0-c5a7aa1cd080", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98654994-448b-47a5-9cb6-666293ede0ef", "sighting_of_ref": "indicator--2200bb1a-1be1-4c6e-bed5-b2ffe8fa01a1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b2f0d0-7b27-4133-9709-71062f075397", "sighting_of_ref": "indicator--3dd25ef1-76b4-4601-a187-e219a7d2e989", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d798d8c4-47e2-420d-8da7-cd25526700cb", "sighting_of_ref": "indicator--c00ff554-63de-4d35-8322-3896f3af0076", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51bbbd1c-4534-4197-accf-43cb91c4b0b9", "sighting_of_ref": "indicator--4a9f5775-135c-434b-b026-3ba30fd6e50e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ebee86-2258-4258-91cc-0cd9d5af8119", "sighting_of_ref": "indicator--c110a156-21ba-4aad-84a6-b8714feadafe", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f7a933-edd5-4dd6-868d-89cc0350aef7", "sighting_of_ref": "indicator--532aad2f-bdca-4f27-a74a-32076cd6d331", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d4d04d-f070-4371-8d9c-a36c4076cb40", "sighting_of_ref": "indicator--eb54f6dc-5bc4-479f-905d-8c1bc5146d4f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca56b4e-f86f-4042-950a-191e08d14dac", "sighting_of_ref": "indicator--de5b3df4-9acc-4ba9-aeb0-8fffe6961e24", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad4e0b3-c98a-469f-bdb9-ab6e89372827", "sighting_of_ref": "indicator--0f73f2ad-3716-420e-93b5-8e8acd703dfe", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cde0c77-a080-4e59-be8b-21d96f71d4fb", "sighting_of_ref": "indicator--f97a4777-cc4e-40ac-9257-ec6a3847ea01", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec11696-2843-4aab-aedd-3227377c18aa", "sighting_of_ref": "indicator--bcac2416-5d3f-4f07-947e-17a7a52ac773", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9916b14f-14b8-4060-ba6f-e0455a9a68af", "sighting_of_ref": "indicator--55df7cbe-d6f6-47ee-895a-ecf0614fc0b8", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7dfdd1-2bef-4235-a106-35789c0316ce", "sighting_of_ref": "indicator--bed829f2-088b-48ed-91d5-dc5bc1a83058", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d64de14-e988-413e-9678-b93b7ca7f324", "sighting_of_ref": "indicator--bed829f2-088b-48ed-91d5-dc5bc1a83058", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a8eacc-164e-4478-aa57-89b55c8623ec", "sighting_of_ref": "indicator--d749766d-cfe8-483f-8a0f-d34018123fc8", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e578a487-238d-4607-9850-4846879a0b8e", "sighting_of_ref": "indicator--d749766d-cfe8-483f-8a0f-d34018123fc8", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e2bb06-c4f8-4c9f-aeb3-9986e968420c", "sighting_of_ref": "indicator--058a7274-a274-4462-b099-6cd1975d171e", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b81f742-0f9b-4420-adb9-d99a8d0d6c88", "sighting_of_ref": "indicator--058a7274-a274-4462-b099-6cd1975d171e", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e910db5e-9793-4dbf-a736-065d9f5a9fc3", "sighting_of_ref": "indicator--0c58ff2b-e773-44f2-b3e6-796dff66206c", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77bf30e4-8584-420b-8607-4792737dd78e", "sighting_of_ref": "indicator--0c58ff2b-e773-44f2-b3e6-796dff66206c", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--236f3b73-fc80-449f-a483-4d360d8f7e14", "sighting_of_ref": "indicator--959c6ba4-00b7-48bf-a6cd-7e8429ea9843", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--789e45ec-cc0b-4d21-8d6e-746b801cd83e", "sighting_of_ref": "indicator--66b9e19f-b2c2-41bd-b089-1d784e2d6612", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e39c0ae-5001-44b7-a5fd-21d6bfed7e88", "sighting_of_ref": "indicator--66b9e19f-b2c2-41bd-b089-1d784e2d6612", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b65939-3397-4f23-9c73-3243ad98a9f1", "sighting_of_ref": "indicator--2b125315-0b3c-415f-be81-d60caa6a3a4a", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3fe3b79-2ff8-462a-bd2e-5375224a8009", "sighting_of_ref": "indicator--2b125315-0b3c-415f-be81-d60caa6a3a4a", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6bd3ff5-343b-4e49-9a1d-be7fb420882e", "sighting_of_ref": "indicator--ad2cf86d-99f1-4079-a175-800957bfda33", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a0444d-42e0-4ecd-8f3b-b2f7a3a0e0a7", "sighting_of_ref": "indicator--ad2cf86d-99f1-4079-a175-800957bfda33", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dddd6c22-d9d8-4ae6-8cfd-6a895ab554da", "sighting_of_ref": "indicator--99d0055c-4dfe-423e-b7dd-3e278dfa5292", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d5da96-4337-4b63-933e-4867594a3596", "sighting_of_ref": "indicator--99d0055c-4dfe-423e-b7dd-3e278dfa5292", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90da4137-383e-4d4d-9f38-74062f1d9dd4", "sighting_of_ref": "indicator--041ae5aa-a069-4ece-b90c-092df317e719", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb9ea14-9482-40e4-b504-eb57dad4a5d3", "sighting_of_ref": "indicator--041ae5aa-a069-4ece-b90c-092df317e719", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--700fd014-5638-4012-91a4-ab275e9b7503", "sighting_of_ref": "indicator--2c08b3d4-f588-4ebb-847a-82169d4711bd", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e60b6d-60b1-4a25-b923-2e5b7f0b9772", "sighting_of_ref": "indicator--2c08b3d4-f588-4ebb-847a-82169d4711bd", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1841a077-2afb-4277-a112-821191e8d07f", "sighting_of_ref": "indicator--768753c8-123f-49af-b965-2bc202f819f7", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e56b883-604c-4608-90a9-72dc4556c701", "sighting_of_ref": "indicator--768753c8-123f-49af-b965-2bc202f819f7", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c50e81e-8073-4489-80c8-f5936ece75a8", "sighting_of_ref": "indicator--f423bae2-d618-4793-9697-0450c99bc55c", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc06d5af-49f6-442f-a3c7-700d0d024741", "sighting_of_ref": "indicator--26389ff3-4cda-41be-955f-550803bca6f2", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b27090-9224-49d8-a504-47fbf1b56785", "sighting_of_ref": "indicator--26389ff3-4cda-41be-955f-550803bca6f2", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bbbe5ca-9cf7-4f2a-b342-0ff552e33f12", "sighting_of_ref": "indicator--3b07d641-55e7-4d85-b2ac-7c2488f545af", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1ef1df-144d-480a-bbc3-9dbb2cd2b574", "sighting_of_ref": "indicator--bfd262a5-05c5-46dd-8bf3-e09f4c38791f", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f59cd4-aeaa-4912-81b3-aaf09b8b4a10", "sighting_of_ref": "indicator--bfd262a5-05c5-46dd-8bf3-e09f4c38791f", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e98a3324-ac21-4a08-8445-03aa6bf282c4", "sighting_of_ref": "indicator--e4c4e357-93ab-4f89-95c2-1def10446e97", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ec2394-f89a-4a71-8455-545fcbff6c34", "sighting_of_ref": "indicator--49b293e5-9366-44f3-8be5-4eb331c6e29c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ebc675d-8d21-4cfc-aafb-c2ddc4f98a71", "sighting_of_ref": "indicator--437445b5-bf97-410a-8882-ac5b4678d4cf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1989ce60-2a4a-45ad-96f4-fa83c7445a9e", "sighting_of_ref": "indicator--07ba61ce-e1cf-43e6-a9f2-f9b39637d5e1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2452afbf-5585-4480-97fb-c6024fcc02bd", "sighting_of_ref": "indicator--7e33c750-c4d6-4762-8897-e1d0c7d5e2da", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c5d683-ac67-4100-af58-a1d6ea400edf", "sighting_of_ref": "indicator--4870349c-6165-4765-9267-bcb3f1000660", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1cdb12-6b70-43f2-bc97-2550b0b612b7", "sighting_of_ref": "indicator--bc08470a-3bee-44f9-bd43-adaf58e769ad", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51e9051-cc0f-49b1-9d9a-4120099366f0", "sighting_of_ref": "indicator--e581bc30-f96f-4828-8f73-9ba508224b17", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a023fecb-48c1-4bbb-ae18-35e6af973250", "sighting_of_ref": "indicator--85319457-3861-49be-9b40-7e3b60ed809a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--911ff5b0-4ed3-4c89-843c-664607acb384", "sighting_of_ref": "indicator--9834799d-4448-473c-bc67-64992532b80a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9b24b5-1cdd-4bed-a6c5-5554215392dd", "sighting_of_ref": "indicator--9c507012-4d1b-40aa-a048-5aa91e08d380", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c8215e-a89b-4375-bceb-6fa09d48f7e5", "sighting_of_ref": "indicator--1a19cd71-9238-4e06-a69d-58e8b0512102", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b8f01ec-6328-4f04-a253-fb7ff453ef06", "sighting_of_ref": "indicator--72f9e69a-36f2-4823-b758-63b24589cdd6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1932a46f-1e9f-4d07-8db9-3c29694f34cb", "sighting_of_ref": "indicator--4bd79d5c-af82-47c6-9e03-06412903cf12", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c61989c-5002-4493-94c9-7272fe63579a", "sighting_of_ref": "indicator--c1c34082-5551-4a4f-9518-b2d0aac6adc9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288e1700-d740-4783-bed8-ae760e8fb881", "sighting_of_ref": "indicator--20bf87bf-c633-42ef-8f53-401a8f0585c0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51fae437-80e8-4190-ac40-938f30f3bac2", "sighting_of_ref": "indicator--38bc32f9-8c3e-4137-9348-a08f45448c95", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d5dbb5-f7da-48ed-a34a-0ab9d68bdc69", "sighting_of_ref": "indicator--38bc32f9-8c3e-4137-9348-a08f45448c95", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4793d29b-c3b5-418d-a8b1-979878f224d7", "sighting_of_ref": "indicator--791a75ff-4711-4c17-9f00-fa4f2099ddac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a821ce3a-7ea7-4dfa-80be-b68e39e0fab9", "sighting_of_ref": "indicator--e0eb3b29-ee56-4c3e-8018-0fbad86663c0", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ada042-be3c-4b56-a4c3-c1c5f7dc9cd7", "sighting_of_ref": "indicator--e2c0cf5f-49d5-4a90-bd12-b3dc5ceaba62", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c2dc91-c4e5-4b1b-999f-51b085aa21c5", "sighting_of_ref": "indicator--1fba90be-de9c-4b9f-9dee-435896eafee1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87adeaea-7b77-4446-b25d-a2d25beff6de", "sighting_of_ref": "indicator--cd5e979b-e580-4ba1-a296-95fe6579686e", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8649beee-c77d-4723-8211-a891b59411be", "sighting_of_ref": "indicator--5d66759a-0b42-470e-bf49-2d1d778f1b5a", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c934736c-d194-462c-acea-48ccd1f8e18d", "sighting_of_ref": "indicator--16393015-f3db-48f0-bfc6-c5afff534b18", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb87a0a-29cf-47c0-93f5-e86eb206979c", "sighting_of_ref": "indicator--6354f1a3-2bec-45dc-acba-51f9ee8a1e8a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a151d0ab-d076-49af-a00a-f9e535351fe1", "sighting_of_ref": "indicator--bb0d4619-1336-4e39-9dd6-b1fa75c64bee", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7fc1e0-5afb-4640-a693-5cd0e0ee74a4", "sighting_of_ref": "indicator--51099f24-d004-43d4-8daf-7d78bbe20473", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b77e2b-aa59-41f8-b6d3-2f4d06801495", "sighting_of_ref": "indicator--b342dd0e-61a9-4079-ac4b-39ece1231cfa", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eab9789-cebe-4155-9ac3-d7f9d963bc25", "sighting_of_ref": "indicator--92d580eb-3f01-4464-96fb-5fccee690738", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6362e0-6489-450a-a382-d39827bfb931", "sighting_of_ref": "indicator--75bf1c65-ae84-4821-8fe6-8bd63f31222e", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ceb3b2b-da9c-4ab7-977e-74e23f62424d", "sighting_of_ref": "indicator--2c78b5c2-1d67-4dfc-984e-e7fa081e1a47", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b8147e-7239-4992-a807-7a55de5cc075", "sighting_of_ref": "indicator--1846f1d1-079a-4941-a3e1-72a14c92c2a2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ec6054-b356-4797-8605-8ac75973b165", "sighting_of_ref": "indicator--d2e57aad-3d38-43c6-8b34-08d0d11aa2dd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ffe46c-8543-49e3-a74c-581b77ce8b5b", "sighting_of_ref": "indicator--007b3592-ff30-460b-a5fa-6afc1e99d2a9", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab378c6a-7244-4810-a77f-ea7550ee140c", "sighting_of_ref": "indicator--d953df77-493a-45a8-ad9e-152ae7c45b3b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0786cc11-761c-478b-8081-0384de43cf41", "sighting_of_ref": "indicator--2878203c-6322-4f09-847b-130b300d3cf5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31dc428e-9b33-4ee4-98d0-51a49079240d", "sighting_of_ref": "indicator--d65db76c-38ef-4809-a32c-02aba14ed99e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c279a9b-114e-41a6-9b28-30e521e84ced", "sighting_of_ref": "indicator--449363b5-dcf3-4667-b553-ac8da01c5a28", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12bd73a7-1ac2-4cfb-a374-567966d475b4", "sighting_of_ref": "indicator--102a4998-ffc5-44c8-98ba-d0c1b00e4fcc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--048673af-7e3d-45a3-90a4-e3d2fc70ee20", "sighting_of_ref": "indicator--dfb8d3b1-a704-48ae-9dc9-642bb72b3e2f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11271c92-0a58-445f-a537-3834ffcbb918", "sighting_of_ref": "indicator--600e6af9-5994-45f8-a0b0-42f17485b280", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc63cddf-67cb-4afb-a280-409fd96fafc6", "sighting_of_ref": "indicator--45fabdbc-10b9-4241-9d3c-59677320a914", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f02d7ff-e9ad-487a-9bea-f292d1b88738", "sighting_of_ref": "indicator--98836f97-f3b8-4ae5-91ca-58d5d736ca56", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f71ff99d-0e1b-4496-b248-8da877edd3af", "sighting_of_ref": "indicator--649c6207-872a-410a-92eb-bc71f4359275", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f155f2-7be0-4eb7-b210-bb5c601520f6", "sighting_of_ref": "indicator--ce099d56-0d0b-4af0-9908-f209dc23b06a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db3dc050-9555-4376-8fde-8715ae2a6bf9", "sighting_of_ref": "indicator--acd690c1-fb45-432a-a729-9278a3ab9812", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eff1e0a-0cd3-4a22-86fb-237e84c2ea00", "sighting_of_ref": "indicator--d29b0df7-5672-4c7f-b3fe-9192ca4a951a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--236afe2a-17db-4b44-a0c7-479ce6f784b6", "sighting_of_ref": "indicator--367a2187-4cd5-450f-b73a-bc6f000b7f3b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd8a312a-5524-49aa-9656-8478aff76820", "sighting_of_ref": "indicator--8b8c7dfc-9335-4585-b7c8-73a22d749f23", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2361f0d-0b1e-453a-8983-4c10806c2bc8", "sighting_of_ref": "indicator--6dacd14a-b34e-4b7f-b5c4-5865ac1bd8d2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828bb4a5-490d-4893-a8e1-d12d49311d94", "sighting_of_ref": "indicator--ba4e32af-79ba-4ea7-9f03-102d9fe7bce3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02b03b0-76cb-47a0-9061-ad2c1536c699", "sighting_of_ref": "indicator--7f3e6581-cc21-4416-bf82-d1ec094514aa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd9c7329-e164-4dbb-93ff-724dffd9430f", "sighting_of_ref": "indicator--ff3d7803-a236-4073-80f1-82d2ba669a37", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d74ed3-fd6f-4072-9040-1ce04f91e685", "sighting_of_ref": "indicator--336be017-0b64-4925-b216-f6169f90a32e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab4b6975-7ded-4f1a-abc5-72d64d1e076e", "sighting_of_ref": "indicator--19e38b99-3028-4661-8d6d-91dc92add434", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b40f19d5-137f-4fb6-b3b9-f6511fd08f35", "sighting_of_ref": "indicator--9b242056-1948-46cc-b93c-8f4e44ccb01c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c872ba-f78a-41e1-891b-1567cc4997d9", "sighting_of_ref": "indicator--de69580e-fed3-4c77-b1f4-7867792fa3fa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9332db1c-a5bf-4107-a26f-012859f4ad24", "sighting_of_ref": "indicator--d40fe54e-14d3-4116-af77-637615e7bcdf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49eee65-72c4-408f-baf5-7052e6956195", "sighting_of_ref": "indicator--35d11919-7a36-4444-bd96-3e9f0d005b98", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee30d78-f6f1-4535-be1b-d62414989d6d", "sighting_of_ref": "indicator--bae9411c-4cf4-457a-b4a9-c96bb5e9565b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec42993-6b63-4be9-9d04-ef711af586af", "sighting_of_ref": "indicator--2dc951f7-dd85-49f2-b5ae-3fa8be495844", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb217a1-d837-499b-ac44-88ce37944c89", "sighting_of_ref": "indicator--2dae0618-0e7b-4d1a-b886-d32bb5213150", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d8abba-da9d-44bc-851c-817f3ec7840e", "sighting_of_ref": "indicator--c024506c-b897-469e-89b9-0f423858a203", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167e42c6-1267-4968-9c4d-f87ae9815d61", "sighting_of_ref": "indicator--31c16749-e6a3-4c71-8c07-09969265eafb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4982ced-ed1a-4d4c-96da-7020e105df7b", "sighting_of_ref": "indicator--92ab7f5d-3d8d-4ba9-a169-0ad2992d7ae8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1466b615-4002-4f68-b5e9-2bb801d10d01", "sighting_of_ref": "indicator--dd899fe1-a793-4e32-919c-b0e0b45a5fdc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b52bda-776f-46bb-bf54-e0daf033c55f", "sighting_of_ref": "indicator--fa9c1b89-e8e0-41ea-b54c-b7879fcd2f32", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc824d05-2eed-47b5-8cf6-72fa1c62ea94", "sighting_of_ref": "indicator--75358fd8-12dd-4494-9d6b-495e701704a5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d4e146-7298-4111-a7d4-7149536f4235", "sighting_of_ref": "indicator--5a40bc44-cf7d-48e6-a708-56ba4b10e963", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a64cc07c-f32d-4c63-a057-64cb5f205972", "sighting_of_ref": "indicator--b8e381bb-4357-4da5-b3b9-d998bc4194db", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5b8f622-1113-4979-a04e-989f0958f1a1", "sighting_of_ref": "indicator--046de570-32e1-4901-8098-9cce44a98469", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a725425b-7b2c-41ca-9607-7607339e0f6d", "sighting_of_ref": "indicator--e170f6d6-a238-4108-9f3a-3c8ceb596c50", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab24598e-a5cc-4838-a401-b7109d50485a", "sighting_of_ref": "indicator--9fa8f23f-d5d8-48c4-8e8e-60ecc3d0580b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4eabed-84a5-4ed2-9055-24406ab8d6f3", "sighting_of_ref": "indicator--08b804a1-b1e0-40cc-979f-da952adb6636", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed2d7443-77a7-42cc-b580-15cdddaff8b0", "sighting_of_ref": "indicator--685df6bc-668c-4266-a70a-a263efdba38a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3e1222-eb98-4027-86cf-dbf177aa020f", "sighting_of_ref": "indicator--1269bb94-fc87-4858-9bef-4413324f9569", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0adf8983-a36a-402f-8f46-84b40f8cad10", "sighting_of_ref": "indicator--e491c819-e4e6-4c54-ae0e-cd4b0f407df4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e2d333d-0a34-4e40-bbdc-82b0ac22fb94", "sighting_of_ref": "indicator--2a488192-943e-407e-9b6a-0c952e99ad03", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513c03a2-a4f7-4ed5-a970-90f7cf53cbe7", "sighting_of_ref": "indicator--736b0e11-4f5d-4a09-958b-6e50a275d782", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c40bdca6-edec-4145-8bb2-320065695c7e", "sighting_of_ref": "indicator--8ee58415-5398-4199-b82a-e3c2d1ca6308", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63fa4264-ab98-43f8-822f-824ca0f39068", "sighting_of_ref": "indicator--3d970502-7e26-457c-b358-66cb26c88f56", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa2899e-55e1-4a02-a5ce-ff91bed601d7", "sighting_of_ref": "indicator--5888463f-9494-46c7-872d-4fadc6f98c8c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1516431c-0aa8-44ad-8579-3c35d30c0d3e", "sighting_of_ref": "indicator--1279e9c5-7738-4b57-a03a-95b29e4ddd3b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f429470-897d-4a71-8fed-082a7f8094ad", "sighting_of_ref": "indicator--5be2a2dc-e2a5-44f6-9270-7f05fff66205", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed6194e-d1c2-4d52-ba4a-964f1d5e2362", "sighting_of_ref": "indicator--bbdc13a5-eaf4-47dc-9635-1f91551bef5d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8287fb16-3a90-48c1-bf45-3f9b5a7b73e3", "sighting_of_ref": "indicator--2908f27d-33c0-482d-8596-b8e0b2a7072f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f435de5-1cda-4c38-bff9-9804fafbfaf3", "sighting_of_ref": "indicator--aaf2ca4f-a607-4e21-aa30-27d8af9b8374", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1506bbc3-a3ea-44bf-9e9b-aab695e1fef4", "sighting_of_ref": "indicator--34c42588-9516-49f1-b941-894535b0f853", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c221e75-d731-4b31-97e4-8ff3661071e5", "sighting_of_ref": "indicator--c22f5ec4-cd7f-4859-8b26-466f7b60e24a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38044354-e6d1-45b9-a7c7-f7b1103c6b1f", "sighting_of_ref": "indicator--bdea7bd2-b93f-4f5c-82b1-13ceccad52bf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2cd1e61-72d1-48ea-94b7-edb931226117", "sighting_of_ref": "indicator--ca4d6e8e-a7e9-42b8-8eeb-934326f1f6f3", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8a0f091-2779-4a7f-9d86-5b71b3aebdc4", "sighting_of_ref": "indicator--9cd673e8-cdfd-4cbf-92a2-125f5853e250", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f965860a-5493-42b2-b6a4-9253a1fa6a92", "sighting_of_ref": "indicator--9cd673e8-cdfd-4cbf-92a2-125f5853e250", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b471e1-078d-4baf-baae-570b0c17d5c1", "sighting_of_ref": "indicator--167e40c1-c82f-4582-a984-c1d7348cf0aa", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53453f01-21dc-4d87-8413-a28715e492b5", "sighting_of_ref": "indicator--3c4787cb-4487-4e36-b3f8-f111ef8c0767", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2dfebe-4f78-4346-a832-8f2f36d76738", "sighting_of_ref": "indicator--24838d40-e8a3-43ce-95a1-ca511eb3dacc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51d5e6b-8323-47fc-9fcb-962e6db013ac", "sighting_of_ref": "indicator--d1e6ccf8-e9bd-48a1-8098-38ee57a6f512", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd69cf5-9d33-4d02-bc08-64b545071a67", "sighting_of_ref": "indicator--dbfe4bfb-b37c-4920-8ce0-0e3fd41055dd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a33b314-fb05-4281-9174-434655fe4fa0", "sighting_of_ref": "indicator--21d7be2e-bc0a-4ce0-aaf8-e71514c92b2d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda6108d-36d7-46d7-9520-3c549d7ed006", "sighting_of_ref": "indicator--744882d3-0400-4428-8fd9-cfb34daac327", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ca7080-b4e0-42f5-89fc-2d7309919398", "sighting_of_ref": "indicator--97b080fc-01c9-418e-ac05-c60cef2c6561", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--250fab7b-53b3-4373-9185-c7810c40d701", "sighting_of_ref": "indicator--c7ebb48d-2b97-4768-afa6-6c77dee3294c", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a025772e-1055-4fea-af4b-8e4ec790d7c9", "sighting_of_ref": "indicator--75cddd1a-7c46-48bb-8312-790c62a61d9e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a596a076-1ecc-408c-ae3c-c1faa0aa66fd", "sighting_of_ref": "indicator--e0e245b8-f0d6-46e7-9b1e-e149eaf4c7b5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--606fc680-0e86-49d8-9379-19039a2da2ec", "sighting_of_ref": "indicator--fd3d5622-22cb-48e4-869b-221b8b4b06b1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d87fce22-f24b-40b8-8bf3-301a8d07897c", "sighting_of_ref": "indicator--70102005-5bcd-4f76-a8ba-312fb57534f9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212fe131-109c-4b4b-af43-0e0861145d56", "sighting_of_ref": "indicator--b4bfc9cc-7034-4d90-b4a2-018d8e1c428d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09927ad2-b5b4-4925-a0ac-90c4b76488e8", "sighting_of_ref": "indicator--9d28a5c2-0802-49e9-bb32-e4114f597044", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d18237-40f8-46b8-a781-4286d98a9c94", "sighting_of_ref": "indicator--8b5f2918-a427-4ad8-8a70-87848a5a2471", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d9839c-5bc1-4dfa-95a2-bb966043ee16", "sighting_of_ref": "indicator--7b603b82-7b44-457b-b0af-850846d9eed4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3efa3b05-bfe5-4220-b95b-d6b7a039da71", "sighting_of_ref": "indicator--b566c7ac-3eb8-4004-bc22-2e2861a0d3ea", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f107726d-a2ad-4a5f-ab88-8f0671afc0ba", "sighting_of_ref": "indicator--20d6911d-5321-4ffb-a5bc-5184ef9a5fb6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb200e3a-1f78-459c-9d8c-63f8cdfc347c", "sighting_of_ref": "indicator--e1a58c18-0590-4c89-8533-5e786d9de0e6", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f94dbc4f-8aaf-4748-a526-07f5e0fe8e16", "sighting_of_ref": "indicator--70e5d1bb-ba3a-4074-a4c2-2e3ab58dac85", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--747c4cc2-68c1-413c-8e30-5039d04ca687", "sighting_of_ref": "indicator--d362086f-cc87-49ff-9834-b82976fc2347", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e52ef6-ce0f-47f9-91c4-82d129dde77b", "sighting_of_ref": "indicator--f82db584-940f-4843-80ae-035b8dfd06f4", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f2875d-4f62-4190-b1ca-47abcf40b77e", "sighting_of_ref": "indicator--073deeae-2269-472b-9d58-868fe9a8ec56", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc90828f-8f32-48b6-9992-8ab18010b2d2", "sighting_of_ref": "indicator--50b5860a-7154-4de0-bc9b-66f08b4616ab", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3768485e-b666-48d6-b496-a3c5a311f066", "sighting_of_ref": "indicator--9fa4282c-4b46-4500-bf1e-322f0ff78821", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33113db-cc55-44c9-9b32-fa333f22fc74", "sighting_of_ref": "indicator--233d7e9e-d93c-4c20-884f-16921a22f556", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbcf1e8-ae18-45b0-abc2-40ddfd15859c", "sighting_of_ref": "indicator--041ac922-4724-49d8-b7f5-cc59d32f7675", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b2a3ad-b939-4f90-8b6d-50993289d844", "sighting_of_ref": "indicator--13377c76-0172-42a3-b5e3-513b2bcb21b0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc8592a-d9b0-4f26-93c2-ced8891cb87a", "sighting_of_ref": "indicator--c14a5152-c1cb-4a7f-be94-5ef818b6bd52", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce4c9bb-7e7c-44cb-b3dd-6a67d3c5cf01", "sighting_of_ref": "indicator--704a67d2-d62d-440e-8508-e1d725dfc7b3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb0c4ba6-4b4d-4629-8f24-36ce63d413ba", "sighting_of_ref": "indicator--d788577c-35b9-4430-9588-977557dde6e9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4383efa6-f815-40a5-bd21-7a4d83608f10", "sighting_of_ref": "indicator--abc19245-3150-44ef-9d2b-fe343b3752cc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49902dd4-3261-4010-9e1b-4ec516d7d4e0", "sighting_of_ref": "indicator--a39494a8-d05b-4c0e-acc4-591fdcd9fa0b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db53eef-8a07-4571-b499-1b75c48a28d9", "sighting_of_ref": "indicator--ec88ecb6-f0c0-4412-98ce-64fcb911d97b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e795c9-bb20-4dfe-82cf-be3d406395cd", "sighting_of_ref": "indicator--995e1b82-2d01-4ba9-a14a-6d3404798bea", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7e6531-f7a3-4608-964d-dc8adb8ecc1a", "sighting_of_ref": "indicator--961cd5b9-e56b-49cc-858e-d28dec3c9405", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30fe3e6-a6dd-462e-ad39-8386f6efb1ec", "sighting_of_ref": "indicator--d7a51599-aae5-4aac-93d5-a512c0d60f86", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cbf280c-3710-4dcf-b5b6-453750c458c5", "sighting_of_ref": "indicator--6cadf1d7-87d7-4c9f-a07a-c045ec94ce29", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a4fd1e-5d04-4fcb-9907-78c0b8415f81", "sighting_of_ref": "indicator--8033debf-0b13-47ad-9b63-d764454ea019", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ccfe70-15dc-4c2e-b393-0fbbaf28eddc", "sighting_of_ref": "indicator--e28cf1fc-3e44-4dac-9d0c-9335fa359bec", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb4fd71-5425-4889-87d0-48c7b77d9192", "sighting_of_ref": "indicator--79addf3a-3e64-40ec-8f05-4f59e162df85", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51153266-c314-47b8-926a-c585ccd7352f", "sighting_of_ref": "indicator--8e4b08e8-2914-4480-bd71-0125b0b1745e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d47050ca-ed24-4299-a3d0-a7453eb54322", "sighting_of_ref": "indicator--f1327c5f-ec97-40b4-9492-a5b5e1705a96", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f794269-651a-43ad-88c0-70c0318f0ad2", "sighting_of_ref": "indicator--cc179392-f4b0-4200-9463-fd99a2d0ae7b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55147b3-57b8-4296-a0f8-d4e6fedee3d7", "sighting_of_ref": "indicator--887e0ed1-2f38-4404-b185-e6d0700a26ec", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09829e6c-d095-4baf-948d-2a9ef6f7c45f", "sighting_of_ref": "indicator--a9e83620-1f13-4b8c-a6eb-5203fa0a302b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e285391e-62c9-466c-91b0-16ac1eea1744", "sighting_of_ref": "indicator--af579f0d-d094-4a2c-8c9e-d1f0e6eaa9e0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be401cd2-104d-414a-b7d7-4b7d02ec3f6d", "sighting_of_ref": "indicator--de839955-ceff-4b5e-9332-d13d14dab485", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e677466e-955b-4d62-8ddb-41b68fe83606", "sighting_of_ref": "indicator--04eaa303-a625-4b81-8882-d96d718c070f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d44295-bae6-467b-9b71-8ef8c55a43c4", "sighting_of_ref": "indicator--930ddc3a-7a35-4bc6-bdd5-c0d36073672f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb85be6-280b-46a2-8deb-64ce862e517a", "sighting_of_ref": "indicator--40d5f93b-766a-4747-b333-0e7d4ae2665b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2703788e-411a-4f2b-b002-d24a980087cc", "sighting_of_ref": "indicator--e80046a1-7c9b-4b74-90c0-d8e2f27a3806", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e957f65-858d-4263-909a-77d834bb3f50", "sighting_of_ref": "indicator--4733fc62-9bd1-47d1-8c87-a48a707d3f31", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9c048a-ca4b-429a-882d-ef822584b04b", "sighting_of_ref": "indicator--ff909a23-1d2a-4623-8182-0510ab35fd82", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80739c3-e817-4959-be8c-5a19f0400dff", "sighting_of_ref": "indicator--0fa3d672-8f6c-4664-8fb1-509365709976", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb82762-7ee0-4292-991e-9d455891a0ca", "sighting_of_ref": "indicator--e6547fd1-a135-47ea-8842-fdfec98dd6c5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2858478-0d63-497b-a9d5-6ea6863a961a", "sighting_of_ref": "indicator--01c70899-6d04-46db-8fba-c0777022e295", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b21c059-e647-4aa1-bb1c-0df71387b78c", "sighting_of_ref": "indicator--315712e7-de91-411d-9457-c5290c435886", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--642b82eb-ffbe-45d9-aad3-b2a482449e3e", "sighting_of_ref": "indicator--0b1bb2d2-11ac-464b-a858-8f747d52060d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--741bc8bf-e894-4f50-ba11-50013c8fa47b", "sighting_of_ref": "indicator--e55b69c5-6493-407b-a0c2-e28acd6184de", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ecf14ca-3bcd-41d4-8822-bc8808e9b638", "sighting_of_ref": "indicator--15b1d619-3c6c-4fd5-a8c1-aa6fc4af3285", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3860fce-0fb7-4bf0-a9fc-64b04155d6b3", "sighting_of_ref": "indicator--691dd3a1-df6c-4ad0-997e-c76694505f58", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf65fd6-69c6-4b07-941d-21dd3b3918f0", "sighting_of_ref": "indicator--22493535-620a-452a-b70a-9ab233eca90a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb1ce754-f8fd-4298-b81a-f0df5ccc0d3d", "sighting_of_ref": "indicator--d3e65de7-aee3-42bd-a8c0-9b7b09b0b10e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c24276c-1e00-4cd7-8904-09a9e25f08de", "sighting_of_ref": "indicator--038e2d48-517e-44cb-84ef-32a21851db6c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830ce9d3-4938-4c15-9fa3-1f1ec02ac652", "sighting_of_ref": "indicator--f428d8f5-0e36-4b82-9972-15a9a794b3c0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f2c685-1c74-4ca9-be9a-d938b958a4cf", "sighting_of_ref": "indicator--1a5f9d8d-5ada-4bd4-913d-4d13d7d63093", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88434d37-56c0-4e1e-a7c1-2e75368477fa", "sighting_of_ref": "indicator--a334f4c1-95b7-4623-aeb8-036024c26eed", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--949a4e42-ac9a-4196-97c6-55e4fa5eb1c6", "sighting_of_ref": "indicator--330bdfd6-1be6-4ca7-a579-a192d2c5b932", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ffb749f-6bab-494f-b0fe-56da755804ba", "sighting_of_ref": "indicator--0c7cc5ef-9d4e-49a6-8f76-278464372024", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2bc1c1e-e611-481d-94b1-394b19a4887d", "sighting_of_ref": "indicator--4c5a3a6b-45b0-4979-beb3-373fa0555d94", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da3b055-16b0-418e-a054-398585c3252a", "sighting_of_ref": "indicator--5116cb06-250e-4a51-97ac-ed01e45faa29", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa4d6de-fe06-4501-8f59-53f9435d1231", "sighting_of_ref": "indicator--9bbf94a5-414d-4d23-972d-4cf058f72b74", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a927e7c6-45db-4dab-a9b0-d1c53603eb50", "sighting_of_ref": "indicator--ea15672b-ebbe-42a0-b8e1-5f6779206d13", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a1d99c-f63c-4221-a4af-bc4a163fe7a7", "sighting_of_ref": "indicator--fe849f9c-2baa-4f71-94db-4ae1e0a3ef60", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda19c05-bc9f-4c21-abee-ed813f778c09", "sighting_of_ref": "indicator--ab3a357e-a934-4eb5-9505-8b2557298d6c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9544226a-b5c9-4be4-b07f-06fef0a9efbf", "sighting_of_ref": "indicator--2af26cdc-73ee-4389-a8b5-49cfb3e7b257", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b28aa4-0935-4ae6-ac30-a5f8a37cb0e5", "sighting_of_ref": "indicator--5778b796-3ef5-4990-b484-4c19e492fc37", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb3a549-6aa1-43bb-939b-3a869603ce3a", "sighting_of_ref": "indicator--a6eaae97-4899-4d3c-9be0-f4215addea64", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7893f665-4c29-431e-b40d-7096e76807a7", "sighting_of_ref": "indicator--d348b23b-6cea-43f6-b0a4-0902f6730fe5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf99067-c499-440e-b047-ffc4c88a93f6", "sighting_of_ref": "indicator--db809e5f-c6ef-4425-a36e-d864b33c7cb0", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb0b829-6161-4fa7-8948-588219011c1b", "sighting_of_ref": "indicator--e9f9aa81-1369-422b-a587-a4513196cdea", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--798a9a33-40c4-4c56-be8e-1d5832bbbdfc", "sighting_of_ref": "indicator--7eddef7e-1857-4147-a6d2-ce58ef0370dc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--035b4a78-7c8e-4980-9283-026d4c89d27e", "sighting_of_ref": "indicator--3c0905de-9fc9-4e00-94c8-5ff1a0682c4a", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--271243f4-b750-4ecb-9ab8-9e1dd283575a", "sighting_of_ref": "indicator--2f4a1cdc-2c2c-4369-aeea-d2c9691f19b9", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48114df0-ccaf-4d02-b098-a33e5b842c9d", "sighting_of_ref": "indicator--aea95b67-4dad-4de8-9335-66aa4438ab21", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ed79be-87cc-479a-ac77-e765580e94a9", "sighting_of_ref": "indicator--673499b1-d4f3-437c-be29-a58c082febd1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b1f83a-1698-4c45-a16d-effc47608264", "sighting_of_ref": "indicator--09c212c6-cee7-4619-8b19-8bee7de7fe84", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f847201-1580-4b2d-90fb-1f02c2e647a9", "sighting_of_ref": "indicator--fe978cd6-f6e5-4e11-a09a-1cb93d93dd57", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4edb7dc4-dadc-49db-b1ff-f222e3fe6727", "sighting_of_ref": "indicator--54dd0116-2ae6-4e21-92ea-e0349983044c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f51bbfa0-055e-478b-b8b9-e65a322a4983", "sighting_of_ref": "indicator--f2e22140-01be-41ef-bb9e-a21924477d50", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e49f2885-1a11-43aa-a286-d2f64cfaa3ca", "sighting_of_ref": "indicator--73dd7745-17da-4851-9ded-ec0aea358fe1", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5818bc7e-76ab-48e7-8a7d-5d0fcc7647b3", "sighting_of_ref": "indicator--1377d563-6083-43e7-86bd-84a972b40831", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3756f9-d23e-40da-b757-8138a9939e2d", "sighting_of_ref": "indicator--339c7081-034d-4f1e-8274-6c53d25e37cc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c901899-bcbd-4974-a5a2-a4943e10196b", "sighting_of_ref": "indicator--a1509435-9f43-4d92-809d-baa9fa043f2c", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4ddb18-24a5-40ff-9f99-1c40c9f5c609", "sighting_of_ref": "indicator--af34fbea-5c12-440d-8ad8-f191255e5cb1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7feae29f-337d-45c9-9d1e-96f201e82dcf", "sighting_of_ref": "indicator--75f65be1-fa8a-43bb-85fa-288302857de4", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf702b3f-1688-4607-932b-edbe756ee6cc", "sighting_of_ref": "indicator--b7643998-7287-43e4-b2fb-dba1db984fd7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59124ede-46b5-465f-a8fa-8393845b9e2c", "sighting_of_ref": "indicator--7f41f392-37ad-4d4f-a237-df6327789eb2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc690bb4-4124-4b86-b66e-ee58d9c1285b", "sighting_of_ref": "indicator--8fa74d10-bf70-4cad-9d03-8c34f76da651", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f38b33b-30f2-4dc6-b7b5-2d71e4438047", "sighting_of_ref": "indicator--d8d703ef-a157-4096-a2f0-2cff1a3ad200", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1103b68d-a318-498f-af38-2ded4bb604f6", "sighting_of_ref": "indicator--55c901eb-899d-412c-aaf8-54068a323618", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14fdf7e0-96f0-4466-804f-d74c01c53dc7", "sighting_of_ref": "indicator--ff134239-da0b-4156-b411-a81f818dd93c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6269e226-455d-4d44-879d-1ac8d13c5740", "sighting_of_ref": "indicator--10d32e89-ecf5-446f-9bd8-b4a33ecc5c1d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7ea895-5d8a-4911-b0e0-e51bae0c390d", "sighting_of_ref": "indicator--c10aa289-1404-46ad-b6ff-1c73e94cfb00", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02874747-fad4-4cec-8176-a9fc64be306e", "sighting_of_ref": "indicator--05a820bc-a8e3-4353-bd37-52ca2ecd02e4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a9baa4-22e6-403c-800a-8c3839a6cd77", "sighting_of_ref": "indicator--81a9ca9d-5f7a-41f0-8fb1-6c2bb3f61eba", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef2d9b0-a725-4ba1-979f-56fd01af0437", "sighting_of_ref": "indicator--26cbb1e0-d231-4084-892a-a8b9fe97a58b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87866c4b-bcd9-46a2-84e4-427adbadc195", "sighting_of_ref": "indicator--3ee1524c-6fff-44b7-b6cf-809d256619b2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f904d59-2e93-41a5-8218-1a89fa87e6af", "sighting_of_ref": "indicator--189c5ba6-0d4c-4115-a1a8-2113f647c6bc", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dab081e2-ca6d-4377-99e9-2e76ccc70eda", "sighting_of_ref": "indicator--ff8827bc-1ade-4dda-b70b-966628d3ca8d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0620a316-9182-4905-9c2a-861f57459368", "sighting_of_ref": "indicator--bfa19f45-b7ad-4f5e-b86c-f0eb0fea2c8b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a58f95-f085-4386-a0b8-1555e55ce329", "sighting_of_ref": "indicator--5dcf3d65-5e77-4366-8b51-1e394eb1ccae", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e4137d-274f-4461-8317-1236ad3d8c01", "sighting_of_ref": "indicator--34f9728c-044a-4fd5-b2a5-4f4ac8824d59", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3fec42-9d09-42b7-a717-438deae32703", "sighting_of_ref": "indicator--034d9dd4-2934-4359-b5aa-01e38aa421a8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99df8649-9c08-4d8f-8bb8-548c5137dc26", "sighting_of_ref": "indicator--8fe31244-e2d0-4888-b47c-8bcc37661615", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac4098b-8ece-45b4-855f-9531d8d745ea", "sighting_of_ref": "indicator--dabc844a-6aa2-4e60-bd4e-a5db21424188", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49cd9ae9-e4ec-4daa-8242-bd1d9c225fc6", "sighting_of_ref": "indicator--3f02edca-eeb4-4a4a-9fb6-7a667cb01753", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd3b14e-ef4a-461d-a460-fa3116c2e5a8", "sighting_of_ref": "indicator--93f1ea40-e45d-4925-be31-a69a422a78c0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a527cad-c60c-4744-9f05-64ab32be2438", "sighting_of_ref": "indicator--e707c2d3-3d73-44c1-a538-352a9c6e9965", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3915280-d17b-4f60-9667-1c24629b3c61", "sighting_of_ref": "indicator--8781c038-5378-4d0a-ad0a-8cf9f8063c77", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592909d1-4983-4d51-957f-b1c92632ea6c", "sighting_of_ref": "indicator--4e61e241-ea44-4160-b4c4-ff8f13128b93", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c00ceda-6224-4a38-9c6d-5533326dac9d", "sighting_of_ref": "indicator--80b5ab42-445b-4f82-b5b3-af2d9ea10598", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5cb2f62-5258-4fb8-9c77-cc6829a2a0c0", "sighting_of_ref": "indicator--c4474b82-1f16-44da-a335-66c28eb516db", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac74077-2f0f-47be-a287-1a887e7691a9", "sighting_of_ref": "indicator--79ed66c6-acdf-45a6-9ad4-f15f62c38ec5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a44be0-e06b-4a5d-9390-76a068224466", "sighting_of_ref": "indicator--064aabeb-0c0a-4f7c-b2f6-13a6ef3e6247", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a5c3e9-11b7-4c25-add3-b62ac02ada72", "sighting_of_ref": "indicator--127cd02e-e0c4-4163-87ef-72699a4047d1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8130fd0-ef8f-47ec-a012-f388fd859423", "sighting_of_ref": "indicator--567ef3e1-fdc4-441e-bdb1-34bda22a1ad4", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5bdb431-a77f-46fd-90f5-38b93cc02cfa", "sighting_of_ref": "indicator--567ef3e1-fdc4-441e-bdb1-34bda22a1ad4", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d287138-1acd-45bf-88b5-1062c213615f", "sighting_of_ref": "indicator--927f832f-0c00-494f-bc5a-ae6d2e390c36", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d34ed0-62db-4870-b11e-b4ff724302e6", "sighting_of_ref": "indicator--4e2bf425-830f-4189-8e6b-459557483f1a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77c0184-7b50-4d9c-93dd-c5977c47579e", "sighting_of_ref": "indicator--2e5cf9fb-f56f-47cd-b920-ff1c0a873c82", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b609636-3fe8-414d-897a-5967d02b5086", "sighting_of_ref": "indicator--a18223b6-7c84-43de-bd05-00ca4a9f5d2e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f29ea7-7a9e-42a2-b5d7-1a1674eda1de", "sighting_of_ref": "indicator--e82e9467-5c64-4d0f-8de4-ff57e655d2e5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ef31ae-44a4-4bef-9775-8dde06047031", "sighting_of_ref": "indicator--567538a2-bd36-4942-86c2-5d7b50104ecc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0ed981-dd3c-4d0f-ad9f-f27d49230ca2", "sighting_of_ref": "indicator--47c9f9b5-0264-474a-9272-09a8ca1dc42d", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b7c655-4dd0-4ffb-bc33-44218fe1d3a2", "sighting_of_ref": "indicator--91fed14c-91be-4654-9aaa-5f11474d9576", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279685ed-6233-48d6-84af-d9dad0755fa6", "sighting_of_ref": "indicator--c2f9e6b7-6c94-44a0-8f92-5d7dc2d03bf9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da1f0ae-fc7f-4303-b476-828997f8e805", "sighting_of_ref": "indicator--200ed6b6-de6d-4b64-92be-a3bf7a5d8734", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7236d67a-0e9d-4ccf-ab76-62204284e1e8", "sighting_of_ref": "indicator--8cc8df6c-2cc6-4b9f-a1b9-df93617da443", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85586a05-3d1a-49b2-ad0d-5f2a64a68215", "sighting_of_ref": "indicator--e0bee53c-12d5-436a-a13d-5ad0a14c728d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed8e738-86f1-428c-8037-caaeeda27c88", "sighting_of_ref": "indicator--b0de7b96-0774-4daf-8363-5f820065d961", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471bd54d-9711-4876-94fe-ab644a3fdef7", "sighting_of_ref": "indicator--4e61de9a-4c76-4411-af9e-f41f85b72aba", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f652af2c-7ab4-48e7-9d7c-cb1837cfaba4", "sighting_of_ref": "indicator--4e61de9a-4c76-4411-af9e-f41f85b72aba", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d49036-6420-4c1a-9bad-d692871a41b5", "sighting_of_ref": "indicator--f3a7ecf3-56de-4031-8362-569ac3ad2aef", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a53c7a45-d773-4b0d-8a22-428692dcf85b", "sighting_of_ref": "indicator--c9d70fcf-2e9b-430f-81fd-be73673abea3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc4acb9-0ca1-4a33-a02d-3d7177340547", "sighting_of_ref": "indicator--a9a48665-cfd5-4e98-b332-11173a9dbe28", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9e689c-1545-4ef9-8c7a-3a7ea1844726", "sighting_of_ref": "indicator--3b01797a-ef46-4425-857f-f7fc42ec5f71", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1029ab48-23f9-427d-aadb-d9e45cbc54b5", "sighting_of_ref": "indicator--267cc7b8-31c0-4d19-9478-9118811f32a0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf043f9-bd84-4ef8-be5d-0c6cbe7822a4", "sighting_of_ref": "indicator--c230d8fc-0d0f-40a7-a940-2c2536a19d9b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b037bf5-0b53-4cc9-83ec-f34883468847", "sighting_of_ref": "indicator--16c55e0c-422a-49a5-b7d4-bc2a556a35db", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f0462d-6af2-40e3-b123-f8f0b9cab0f1", "sighting_of_ref": "indicator--3185ddc1-10ba-42d2-8a14-e223eab918a9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f955f199-604a-46b9-a72e-773ffa240271", "sighting_of_ref": "indicator--d572a07e-e487-4bee-af6e-2e41f22fc2e5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53cdb09c-a079-41ce-8d2d-564389cae99d", "sighting_of_ref": "indicator--ca13cf21-949f-4184-9ca9-8458cc382de9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4cf7e08-e122-4c70-81c1-f4e7b8232292", "sighting_of_ref": "indicator--74b06603-c5ff-4916-8c43-65f5f5e18c9f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d05da0-8064-4f41-82f0-c96f3e3d8327", "sighting_of_ref": "indicator--f63817b9-5bf5-4bea-a3c5-077e4348b982", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d388b419-9739-4493-9dcd-f76fb1c00f0a", "sighting_of_ref": "indicator--64fd8731-d277-4205-a13e-5424d6c9a16f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b45cb14-8408-48b6-a404-ef7fdf830272", "sighting_of_ref": "indicator--7894e565-d43a-4342-b3ae-965ca8db4232", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e943ed91-c275-4cb1-a874-8a75a6ba88fe", "sighting_of_ref": "indicator--ed2454b2-c4db-473e-931e-cf2baca3a774", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4f0131-22f1-4511-9b40-ea4e53599488", "sighting_of_ref": "indicator--78262a7e-1866-4853-8b95-a60ee0fdc2da", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68750ec-c30d-46ea-8c06-1834cac00fdc", "sighting_of_ref": "indicator--486a2025-2b22-4747-b617-56a7e59c6375", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4e1e13-1045-4cfa-aa28-85c1c332d5a7", "sighting_of_ref": "indicator--9d1fee42-1ce2-4710-bbb0-164c3e6df3f8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08010556-7525-4a5a-8d27-c3407a526d89", "sighting_of_ref": "indicator--c8e50eb5-cba5-4864-a3f2-593c851faf3d", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d10e0062-8c6c-4c62-9da4-b4397e71302c", "sighting_of_ref": "indicator--c8e50eb5-cba5-4864-a3f2-593c851faf3d", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb4ccb2-550a-4a29-ba16-90b652d7262d", "sighting_of_ref": "indicator--08cf0924-777a-4a3e-882c-286d86ecaaed", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f76a1cc-e057-4f16-ae0a-48a5602dad70", "sighting_of_ref": "indicator--08cf0924-777a-4a3e-882c-286d86ecaaed", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a9b5ca-94fa-4aef-833a-2cd112993c5a", "sighting_of_ref": "indicator--62c66dd5-3234-4a0a-9255-883591e7cba0", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b31c4e03-e8b3-42e3-a373-b78c85e46607", "sighting_of_ref": "indicator--62c66dd5-3234-4a0a-9255-883591e7cba0", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b919c12-68ad-4389-8d45-9723a3286071", "sighting_of_ref": "indicator--6defe3eb-6afc-41fe-a62d-7a3731b8a611", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a810a234-20af-4d1c-b7c0-70b7648016f1", "sighting_of_ref": "indicator--1435003e-c7da-43e7-9860-9b94d0f82089", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c191e24-86b4-40c6-89ac-7d0754fde81c", "sighting_of_ref": "indicator--8c9da27e-ab5e-4aad-9639-e3124424df18", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063fb022-617c-4337-a682-43dd922aac0e", "sighting_of_ref": "indicator--63b9e96c-4b53-4d5e-9ad4-492333156947", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a614a6f7-63f5-430e-9dfd-b07cb3601718", "sighting_of_ref": "indicator--6c2d9e14-3820-43b2-a21a-d770507bb951", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43287404-ff7c-40ff-a641-14ddddca2461", "sighting_of_ref": "indicator--095570a8-c525-467f-acb8-2d127a7ab78c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1db946-bcfc-4461-a97b-fb8adb185065", "sighting_of_ref": "indicator--3d0c503c-d327-4e80-af51-97273bc4029c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2945ffed-b785-415b-9d0b-b9e902f1edee", "sighting_of_ref": "indicator--11e78286-d48c-4ac4-996b-ba4899a3f444", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a05775-7fa6-43af-a2f4-1eed2992a6d5", "sighting_of_ref": "indicator--9744c7fc-f885-4ea8-b74d-9f54863c1d89", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7512fa13-cc3a-4e1a-8389-8dee81bddd94", "sighting_of_ref": "indicator--718c9b58-d0f1-446b-a8b8-5e2879a3543a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6291df1-5e56-488b-926f-6353c7bfcc52", "sighting_of_ref": "indicator--4ed94898-d68f-4906-aaa9-a218f1b29c81", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3452a20c-d4b0-47ce-942c-d5a6d5d3779b", "sighting_of_ref": "indicator--043936c8-c381-463f-b333-ae548a761531", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c50f66af-8c72-4b2c-8e82-9a32b5c8bdc0", "sighting_of_ref": "indicator--51f5387f-253e-4439-94f6-5372863132cc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27437ae3-480c-4c46-9477-3f38b4195267", "sighting_of_ref": "indicator--e0d9f3f6-2d1a-4ab5-b94c-5fdd1a5ab99a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc947740-40fc-4e59-9d55-cc4b37be1f1d", "sighting_of_ref": "indicator--b4276fc1-008b-4725-b7f0-2f5324b133dc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307e55eb-108b-41ae-b13d-fecf7a8c666d", "sighting_of_ref": "indicator--f644f536-39ca-49b1-bc00-1b67965d25c7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e3c6df-4756-498e-ab78-1a830d8fd4cf", "sighting_of_ref": "indicator--159c45fd-ba7d-4014-a351-e30bb4b1232c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da6cab2-5817-4b52-a1bf-4968bb641926", "sighting_of_ref": "indicator--816ec771-c12f-453e-af74-b0d1234d14e2", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f5fb5e-3390-47d0-a907-701ca211c819", "sighting_of_ref": "indicator--aa41c72e-bf3b-4303-8d0b-c8452242335d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faece794-6ff8-4bde-9d3d-0bc626badb38", "sighting_of_ref": "indicator--49e7b344-444e-453c-be2a-f7ab3a8967e3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6eba453-dc05-4513-aa13-5c721ec0d453", "sighting_of_ref": "indicator--e5f9a977-6457-4465-9061-e86187d7ad64", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b49cd4-1a83-4f8b-88f7-5a3fcb2b7277", "sighting_of_ref": "indicator--5df9b031-6db9-4a01-bb80-cf1b88fba8d3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ad5a87-6749-4b7c-8896-79de6afec3c3", "sighting_of_ref": "indicator--d05431c4-3bcd-40fa-9128-86a6621e762c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e890a55d-e9b7-4d95-ab18-1fbd91b048e2", "sighting_of_ref": "indicator--1b0af9d9-40cc-457c-90dd-14cc06ecdf09", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f82c1868-3f84-47ac-8422-dc33a90bdf5f", "sighting_of_ref": "indicator--43180a80-46cb-41cd-927d-36dc9a99e569", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb8bc718-ca05-4ced-981b-161536a19ac8", "sighting_of_ref": "indicator--217ac2b6-4d67-4ddb-9d22-50aa6c1bdcca", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c8c79b-eb18-4439-9ba7-960d12ed55de", "sighting_of_ref": "indicator--e77a5f4c-1090-416c-a667-ebbccbba4cce", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3275d705-1075-4447-8d63-9928f1f2e68b", "sighting_of_ref": "indicator--274942d8-7aaf-4a0d-8c1e-22da499984b4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd866566-40e7-44c6-beab-3a7c77f9f089", "sighting_of_ref": "indicator--a85b606e-5871-4a48-a88b-9252a1b3009d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a358d376-71b5-4013-b489-2a81e3250dae", "sighting_of_ref": "indicator--536d46bd-d0e5-43f5-9393-33042a637f12", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fdb957d-23ac-4afc-b7aa-af1b01c4474b", "sighting_of_ref": "indicator--590d8bbc-5506-4d6c-b35d-2e576f8ae67d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--452bc496-db8c-4579-9291-80fe032cc20b", "sighting_of_ref": "indicator--1dcc94b2-a797-4358-aaf5-df336235a2f3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5039a60f-45e2-4a3b-8c9c-dc202e3bdcee", "sighting_of_ref": "indicator--9b4521b3-868c-4c25-ac60-6d69fee6b9b8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815cf526-6a16-4ba0-bab3-0f7052f07c0b", "sighting_of_ref": "indicator--a792a3a2-c135-4514-a57a-ab6baeb1fff3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94bd4582-4c05-4a9a-9bbc-4ba32624b880", "sighting_of_ref": "indicator--bfdd74ef-2b28-4f3d-af2a-7d6a5834547c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44df8f8-f5f8-42c1-a60b-9dbb639ec12b", "sighting_of_ref": "indicator--fe111e76-a419-4700-8e10-706076153c6c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d83270-3188-4e06-bb3c-3f288c340df7", "sighting_of_ref": "indicator--ccdbe67e-4eec-4379-ad3b-7a60e9ff5f3f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4033896-c238-49d5-938a-75f1654e50fd", "sighting_of_ref": "indicator--9cf88832-1ddc-4acf-b4c8-42251c961622", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4760d8b4-9557-4796-8881-577b9aaa5b53", "sighting_of_ref": "indicator--fa4232f8-f39e-4208-a381-086be4028ee5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7613035d-47aa-4811-88c3-35fcdeda32cc", "sighting_of_ref": "indicator--0cd86919-88c5-4a69-be0e-0a30966ed23e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18497359-ad3d-4577-9312-cc7712cc5f66", "sighting_of_ref": "indicator--16b2570b-1e3b-40c0-86ac-8b423c9dec86", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d125e91e-490c-44cc-817f-01e0bb012802", "sighting_of_ref": "indicator--cbfe5712-7f37-4284-9047-3289b998dc7b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02dac06f-64dd-4952-bdc7-1f3e1fb13f52", "sighting_of_ref": "indicator--e50b4bba-3aff-4dce-850f-9d4b749f7bcd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917438b1-570c-4126-944a-2b30320a6347", "sighting_of_ref": "indicator--f284265f-25bc-428a-b386-61df1b8cf423", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ac7206-afa5-435c-82c4-387c801f7bd5", "sighting_of_ref": "indicator--92b36843-9ddb-4c35-bedb-4a7c5021df9a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5987b643-cd96-469a-b5a4-74926933ae03", "sighting_of_ref": "indicator--c69103f4-ea69-4633-b79a-76287915530c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28cbd3d7-d3cb-48a1-a448-0ef5eec6c792", "sighting_of_ref": "indicator--927a6e2b-bf11-46a7-967c-130eb8ca0544", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae12e1b-8801-4efd-ba89-da9aa4b24625", "sighting_of_ref": "indicator--91ffd4e8-f471-4845-ae5c-e904e9f595f4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5cd2a43-d562-45cf-8129-55e1092f496b", "sighting_of_ref": "indicator--a1f569b9-da95-4d11-aa2c-0683148f4a2a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f10be64-5cec-4269-a2d4-22829e1c007d", "sighting_of_ref": "indicator--a9b8288f-0ed5-4064-8195-4565994c156b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4db1032-956c-439f-bb7b-8e23ef3b1014", "sighting_of_ref": "indicator--4ce71e77-1656-44f7-a979-40fefd75d61d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9485e2bb-d728-4fdc-91d4-5323ca352db3", "sighting_of_ref": "indicator--6402f855-ec3e-4344-8c84-16b9ef93e088", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76cbc56d-e707-478d-9918-7deb4d31e912", "sighting_of_ref": "indicator--2cc41020-cfdb-459a-ab0b-60f061686603", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0aa7c27-a213-46f8-96b1-f1c62374de24", "sighting_of_ref": "indicator--2fd00ff5-a3dc-441d-aea4-a239e6a250aa", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdcafde5-c4e5-4c63-bd55-76cbbf5c13e2", "sighting_of_ref": "indicator--39b99bda-cb23-40fe-b5b8-7288e000dbfd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d20356a-8528-4c45-907d-8a1c79e93024", "sighting_of_ref": "indicator--a07ac0c1-c64a-4361-a14b-daea34f3e94c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--494200f5-e3ac-4f1b-ae8b-0233786a9c44", "sighting_of_ref": "indicator--a0c2b7df-9227-47df-83a7-750b5f15e035", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b605c753-8a44-4698-851c-62070b1d1fc3", "sighting_of_ref": "indicator--360360fe-8d45-43ca-b2df-5509b8bd8659", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff768f2-54fb-4c39-913a-571dfea2f3e4", "sighting_of_ref": "indicator--a172de97-d5fe-43f0-abaa-ad1faaef286e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dff9f889-a8a4-4741-bcfb-3d3a09c52ef3", "sighting_of_ref": "indicator--4ff30b44-8558-42be-b696-3c7d0276e22f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb466ad-e264-47cc-a91a-a9f362e721d2", "sighting_of_ref": "indicator--1ebae81b-0d2f-4377-b4d0-4fbd56644551", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a48cd50-c998-4bcc-ae96-67522453aa34", "sighting_of_ref": "indicator--ba6f5f39-1f96-4175-89ca-fc61deacfa76", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7f9d8c-c130-4930-b751-53da50cdbb58", "sighting_of_ref": "indicator--0957ca49-4a1d-4249-8108-af200c946883", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1ddf1b-1995-4063-9746-027c3ff12fc7", "sighting_of_ref": "indicator--ec609a62-2117-46e4-a3f0-e0e3a9231fd3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--427cf5d9-2240-486a-ab2a-33db9133615c", "sighting_of_ref": "indicator--05507aeb-5bc0-45f6-9e06-c50b12b35b49", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--580ce84a-b403-432e-a9a6-977bc1e46eb5", "sighting_of_ref": "indicator--1a6663d1-52bf-49f0-8907-26aa903c498f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ece2bd3-bfc3-411a-9ff2-842e9c283644", "sighting_of_ref": "indicator--2cddf5d1-ca8b-47e1-be85-7aa31f618c82", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127801ee-e926-47a2-bf4d-87dedd9a910d", "sighting_of_ref": "indicator--3a711974-8591-43e3-8eee-5c564f8173a8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a7b1b8-b4bc-47d4-9fc9-ee8ac2282a19", "sighting_of_ref": "indicator--2874e55c-da6a-4896-9c03-2820a674ba3f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f2a485-3968-44a7-827c-edf3f534f737", "sighting_of_ref": "indicator--b3316b3e-6685-422c-8ec8-eec015630fd9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0019ab3-b381-48eb-905d-53e2d8ef2d31", "sighting_of_ref": "indicator--004abcb6-4ef2-49db-bea4-9bb176a52c07", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514cda49-3c74-4630-9069-b91554d8b23b", "sighting_of_ref": "indicator--eda1f679-cd57-46aa-afc5-29110307af74", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1feb351-b4a7-4364-ba10-2cbde4b4f938", "sighting_of_ref": "indicator--44348827-8d64-4f31-b940-16e35968bebf", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb5fa21-75a5-40a9-b4d3-dc723aaf8b63", "sighting_of_ref": "indicator--657bcadf-9b48-4a59-b056-6eb5d8f2ac65", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84973e16-96ff-4eb5-b873-59d743e88ce4", "sighting_of_ref": "indicator--d6408980-259e-4263-a940-5db45e9fd3f4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adfef855-fa89-4a04-91ea-609e7306a1d0", "sighting_of_ref": "indicator--aaf72348-d582-4b6a-992f-a919bf357273", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b32bf1-a914-4510-8948-fda15fac97ab", "sighting_of_ref": "indicator--14481fa3-017f-4733-a66c-aeed08b91a09", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e96646-8a68-42be-bfd6-951abb663dd9", "sighting_of_ref": "indicator--b0914f51-22fe-4c75-bb8d-dbae2ea06786", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a36e3db-4360-4245-9570-54b3e24027e5", "sighting_of_ref": "indicator--8fd9d95c-2c57-448d-82f5-2a28b894fb21", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f590dcd-84c1-4f62-bff8-487b6c80bb92", "sighting_of_ref": "indicator--2d06795b-0058-4a00-983e-f811e912b505", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58268c4c-cd50-47b4-97f4-050fdfa02bb5", "sighting_of_ref": "indicator--2808a9ca-bcb0-4553-9eff-44e4e5250a0b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd805af-1789-41f3-8688-dd1c8081896c", "sighting_of_ref": "indicator--c2b27c35-c737-4f04-9418-ade64da84733", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a87b394f-d4bc-4d36-aa98-0b417c879866", "sighting_of_ref": "indicator--200d45ee-ace6-4a62-a7c3-b439fc075edd", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0512a18e-7c26-4dc6-97c5-b868ddb80825", "sighting_of_ref": "indicator--55fbcb22-9650-419f-b086-062aaefc7164", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2e8108-01d8-470e-b79d-95cd14962c97", "sighting_of_ref": "indicator--692db512-74b5-4784-b897-c868ebdf2073", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57624998-49bb-4701-9448-7005f1c11e8f", "sighting_of_ref": "indicator--3b57653f-31a8-45bc-a086-abd9f67fbffc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--183d0447-28ad-4beb-b98f-d2bd725b8853", "sighting_of_ref": "indicator--538cab5d-76b2-437c-9ec2-2a078055f613", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68e7c84-0e64-4e66-8174-aaf4a5fd6b61", "sighting_of_ref": "indicator--7c74632d-c911-43a7-b513-9ad94ab4feae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--986f9271-1e2d-4a65-a585-e444f880f2b5", "sighting_of_ref": "indicator--d81f5585-5dc4-4184-aced-7f3cd4763aef", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10f49b39-4634-4392-8ea1-123201e46612", "sighting_of_ref": "indicator--97e23658-f724-48e3-b766-ff7b6f8fbc51", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2670f700-9871-46b6-a5d1-b9cb4457a0df", "sighting_of_ref": "indicator--bdc75047-8a76-4913-aa4d-178e5f38010c", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3ff281-3ef6-4579-a961-21d3afc84e10", "sighting_of_ref": "indicator--bdc75047-8a76-4913-aa4d-178e5f38010c", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d1458b-3e31-48ed-bb4c-715eef7a7e91", "sighting_of_ref": "indicator--3747b1be-be64-480b-9b84-c8fb2492167a", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce5aba0-e655-4af0-be17-38f0e7f8e22a", "sighting_of_ref": "indicator--3747b1be-be64-480b-9b84-c8fb2492167a", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee7f502-e7d0-428d-aded-c5b9efdd429b", "sighting_of_ref": "indicator--04a0a73b-0793-46c8-b52b-ef3252565459", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17bdb265-598f-48d1-9de7-8867ff494830", "sighting_of_ref": "indicator--04a0a73b-0793-46c8-b52b-ef3252565459", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b94a96d-4db1-4d4a-a07a-89f7cea3ea35", "sighting_of_ref": "indicator--421d641f-76ae-46b4-bb55-4a488999b5e1", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb9976f4-ca57-485c-9b29-809692716d36", "sighting_of_ref": "indicator--421d641f-76ae-46b4-bb55-4a488999b5e1", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2091d597-973a-4df7-a515-b2d1e29c540c", "sighting_of_ref": "indicator--daeb7537-5497-4bbd-b5cf-a14438c2320d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6620dc-2e21-45e6-aaa1-fc315e34581c", "sighting_of_ref": "indicator--d67b8d8b-ac8d-457b-b234-72b9f8060688", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d816177-ada6-469f-a3fc-b3818e601eab", "sighting_of_ref": "indicator--693a6ce2-83ce-49bd-8fd3-e709ed3c728f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d6cc592-4577-474a-883f-76c3119dfeec", "sighting_of_ref": "indicator--b1fe561d-20fb-4c4d-a3bb-e7b518599131", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eac184e-6f87-470f-a25e-5049d26d403b", "sighting_of_ref": "indicator--271a2233-6a27-439b-a21a-1f1b2fba2eb8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0878522c-503e-44bd-8b40-eaee240d8dff", "sighting_of_ref": "indicator--0f46716d-bae1-442c-939e-1d1628889724", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cbf9a17-358b-4dc9-967a-362c40e6ba46", "sighting_of_ref": "indicator--6dc5fc1d-700b-4cd6-914c-a161d8ea9128", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d495b2ec-e8e3-466d-be6d-19d854ffe8cb", "sighting_of_ref": "indicator--24442c84-6572-4ee8-9bf0-f8991d4a04d2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11523ff-f750-48af-9852-28bab9a7414d", "sighting_of_ref": "indicator--5d1e5945-9ec8-4b3f-8264-b51ebdecff6b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36dd3d4-47b2-419d-b916-69e139efab7b", "sighting_of_ref": "indicator--8318fd58-76db-4bcc-a264-b7ebe00e604a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38dc3ea6-da16-4851-ad9b-470ca8fe556c", "sighting_of_ref": "indicator--ca21e840-87e9-4e28-ad5f-e927436e66c2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21679f1-3d0f-4986-bdd9-1c8e042a37b0", "sighting_of_ref": "indicator--827c7c9c-0bd1-4def-a844-0c9b1d11cf9c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ac9772-cbd7-4002-9e47-a74acca671d5", "sighting_of_ref": "indicator--69c3d2b6-224d-446e-8055-2b6b5eac0bc1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547cbf73-a423-4687-91db-8526503844ce", "sighting_of_ref": "indicator--a8aa6118-f67e-4659-a538-5f3f81022d5b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b34e69-9ebe-4cd7-8bdb-b17ebb8fb005", "sighting_of_ref": "indicator--9b2f4c44-3372-435a-93fa-8f5bc68ec023", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe882ee5-8cba-4c0c-9dc9-69751c64705b", "sighting_of_ref": "indicator--fbbec06d-8a16-4316-a6fa-e41b9fcc86f5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7774f7a-1dff-4027-a307-869eb153d32c", "sighting_of_ref": "indicator--efe25061-f98c-4372-91af-4221b67f93ec", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bda68dd-748a-4128-bb52-69d17dbdfebd", "sighting_of_ref": "indicator--bb475443-4156-4a41-94f8-a7d68e9c9027", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ec743b-847a-4ab8-ba78-f577fd02e039", "sighting_of_ref": "indicator--c7384fad-39de-4bc6-aecb-88ca77d9b751", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5540bece-3811-42e0-9d3c-7556b84816af", "sighting_of_ref": "indicator--b26cacf8-a6d6-4d9b-8e5b-d943ab0fd84e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6655d8a6-2d48-488e-84ff-7348837d1f28", "sighting_of_ref": "indicator--72e29080-d23b-4b12-aa08-f5e2928d7543", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2403de13-7618-40e0-9aa6-409efeccfda2", "sighting_of_ref": "indicator--65c21d38-0607-4d6b-b089-f28c0ca2a502", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe01313-0fd6-49e7-a3ac-2a15a8923aa0", "sighting_of_ref": "indicator--09603bd7-35ec-485c-bffc-01e656e62269", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b06c43fe-3acb-4b3e-ab45-214a2ab6b0a2", "sighting_of_ref": "indicator--78318679-20da-4160-90ef-a01f02f032b3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2af98651-476a-4440-8811-7f32c6ac2935", "sighting_of_ref": "indicator--3f74a1f5-11fe-4f12-bc09-7b096069946c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6324935c-f1db-478c-b0c8-e04be72cc445", "sighting_of_ref": "indicator--38ce67e0-cc41-49e7-a53a-d82b9db94ed7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a66fe1e-f658-43f1-8004-c87034f4fc8f", "sighting_of_ref": "indicator--9dc80f27-4116-40b2-aff0-5f9b39a9da31", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7aa1cb8-65dc-476a-845f-a1989f1ea6d6", "sighting_of_ref": "indicator--a4386066-7ed7-43c6-b7ba-71c9097209b8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9666831f-ef6d-47d6-9d34-a52ec13793b7", "sighting_of_ref": "indicator--e6491f1e-eb1e-4fa3-a215-864608c62c3d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8ef560-4f42-45fa-8810-ca463b1d159f", "sighting_of_ref": "indicator--ac2bd11a-1312-420c-a158-93f504d51027", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c56174d-32b0-477f-a602-e13e204c5c52", "sighting_of_ref": "indicator--3a318cf3-b4f4-49f0-9bee-c455bc47a18c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a4de7c-b564-4a5b-8ba5-eccf412b7963", "sighting_of_ref": "indicator--6976e1d3-191e-445b-afac-8d8ffff3d0f9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27c409b-f204-4322-94fd-425b5ada4bdd", "sighting_of_ref": "indicator--dc74c77f-a9a1-4d60-88ce-5d014c39e42d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45f00ea-3c27-4929-adf8-8e78b28d323b", "sighting_of_ref": "indicator--41a15700-c29f-4067-8ccc-12472fafa804", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8b2697-eae8-4be5-a31d-749481779f16", "sighting_of_ref": "indicator--e4982f58-5765-485e-8017-a22877e91f7b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57227435-0488-4ccc-b50b-e59912766096", "sighting_of_ref": "indicator--a2af2d1a-ffcc-4086-972c-15a7d3fe2fc6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf8ce00a-cca2-4a38-bcd3-4c490223f8a5", "sighting_of_ref": "indicator--f7a87a53-271e-435a-9a70-a866450bec53", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b7ac15-78e9-4978-94d1-a18482c29f5c", "sighting_of_ref": "indicator--db774ebf-e71f-493d-bd39-c8212cba2a0d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a95a894-5c0d-4823-93da-ba32627e88b8", "sighting_of_ref": "indicator--823a6ee5-bfe8-416b-9483-71e74472426f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29bded02-de63-4233-ba0f-87d51dbc975a", "sighting_of_ref": "indicator--44f41a56-561f-4bfd-a43c-62d5b2e34099", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8fe2b17-7768-4c38-8a0b-70e7feb290ae", "sighting_of_ref": "indicator--aa6c14fe-0200-4ac7-84ea-e83ca2b63a6e", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec16048-1599-48bf-9fc1-c94aa6880b4d", "sighting_of_ref": "indicator--6b4797da-92db-4382-9a93-2d7e1f2ba329", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c86118ea-a054-4b5b-93de-f561a3b57e94", "sighting_of_ref": "indicator--33b91476-d6d5-4311-8637-a0fdb88c9d20", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9148cf68-ea25-4d22-b143-a9d4fcc339cd", "sighting_of_ref": "indicator--33b91476-d6d5-4311-8637-a0fdb88c9d20", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af6ce36-3b31-431f-b9bc-bbb26201bb43", "sighting_of_ref": "indicator--6bc8f815-05fd-4e6a-a5d4-1d5a3c9e98df", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da8bdde-6a53-4953-a572-769af65e9d51", "sighting_of_ref": "indicator--3d067ab2-7042-4245-ae17-4d3337f85924", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8ff81c-50ba-4ed7-943c-eb7dd729fe9c", "sighting_of_ref": "indicator--e4e3dd20-6710-4698-95dd-67b75c4bae17", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba90715-2f8e-4495-80c2-1fca15448ebb", "sighting_of_ref": "indicator--b9acb923-dd85-40ab-a364-b02734e03e8c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67cf618b-3aa2-40ce-8264-f12b4032621b", "sighting_of_ref": "indicator--b042240f-a415-443a-97e2-9df3432731d5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d8dce1-e27f-47ce-a069-5062f8b9636c", "sighting_of_ref": "indicator--00d751b0-d17c-4e16-b557-9133b57bdcf4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a8d030-39c5-418a-8560-dd971e864ed7", "sighting_of_ref": "indicator--11fb5365-d25f-4b86-b6fd-6a6ca4d4127c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de02e1d-0a48-40ac-91e9-8063bf85b892", "sighting_of_ref": "indicator--57ccbcba-5cb1-44fc-9fb2-0525f039fd23", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef915ad-9e84-4681-a119-40914e2b6150", "sighting_of_ref": "indicator--9787810e-36d2-43f5-a9dd-e2ecc58c71d6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1ff251-4c61-4eb3-8828-eaa0d7b472ff", "sighting_of_ref": "indicator--fb677279-16f2-4ce3-976c-b902b28eebec", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8d75eb-1daa-4744-96b0-5d91e1cff05d", "sighting_of_ref": "indicator--2bcac9af-0b1b-4b58-819a-ebae96ba9c1d", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a78613-9998-4a6b-b47b-dfc703e0a158", "sighting_of_ref": "indicator--8c1a2eda-5b83-46d7-9ebe-7c412e2d6903", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846df82d-931f-4e74-a3ba-b6cab8e1316d", "sighting_of_ref": "indicator--79c8552a-e030-406e-ae2c-d2cdcb71995e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea77a0b-04fa-4235-b871-8674e08e3350", "sighting_of_ref": "indicator--a0c2260a-a1e8-40f8-9be1-3f4a1f040b55", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04128a6-09f2-44b8-b4cf-27eb08697219", "sighting_of_ref": "indicator--3a0fd4bd-a0da-4cf5-a954-ebc682604b03", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d44464-b342-4248-80c6-aa80cb39bd81", "sighting_of_ref": "indicator--3a0fd4bd-a0da-4cf5-a954-ebc682604b03", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f11f125f-4799-4a98-b9a7-207b2284347b", "sighting_of_ref": "indicator--fcf0c0ed-7cb6-476d-af3c-a58f527b9455", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3dd6cb-4778-49f4-90da-ad1cfa979552", "sighting_of_ref": "indicator--3c4487d1-fea0-447f-8737-f165b5277bb6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4b2275-7983-42b4-981e-f9badffef310", "sighting_of_ref": "indicator--56eafa81-ed69-49bd-8421-670629dfd5e4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00cb9d12-556a-48b6-8087-7fc05cce7b52", "sighting_of_ref": "indicator--13d1b7cf-fb9b-42a2-9540-201e5337b776", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a45fcd11-4f3e-4df5-8134-d2a1dee3ec52", "sighting_of_ref": "indicator--66da6fa1-1913-4839-bdec-fc78b2265db3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd92ef7-fbdb-42fd-9486-a0a3054692a6", "sighting_of_ref": "indicator--91bcfe29-ad26-4f67-86fd-071fa7a1df0b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd530bf-7dc0-4931-8cd2-f34e182fd037", "sighting_of_ref": "indicator--a787409c-522a-4aaf-9b10-919685a1517e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1d1892-bafe-4d21-8646-f42338de03a4", "sighting_of_ref": "indicator--1f8d5697-31c4-4dc7-8d22-bb5bc172c198", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685fa5aa-1a48-4d1a-b76c-2be0a5a1d2da", "sighting_of_ref": "indicator--1f8d5697-31c4-4dc7-8d22-bb5bc172c198", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c1141e3-16b8-4904-b59a-e7cfca7393cd", "sighting_of_ref": "indicator--d6f54025-d26c-4820-b1a5-3e51bc288d9c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9c57ac-a7db-4142-b795-03f71e2a8ab2", "sighting_of_ref": "indicator--7c2a49ff-09f8-4500-ab6f-3898d5e99134", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e949f61-396e-49d9-8cab-158833d2dd05", "sighting_of_ref": "indicator--db9de3d4-a0f2-4430-bdf4-d3ea022ab2ea", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee3d2bb-7c31-4a65-8278-4c8264bdab37", "sighting_of_ref": "indicator--3d312f8f-09d3-4a48-ade8-b9e15edb6266", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bafb09e-6cbf-4fa2-b8ce-457903e0d70f", "sighting_of_ref": "indicator--ecd90b26-6cde-4242-b52a-050fd65f07ef", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee28809e-881e-4f32-9b0c-c86924c2056b", "sighting_of_ref": "indicator--523db3dd-3f9b-4fca-b278-0df83379953a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f23945-631e-4003-bc82-577ce55df6fc", "sighting_of_ref": "indicator--a08c7aa5-99d4-4298-b8bd-303ae500db06", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c462b451-7867-4018-a40b-3c5d8e7b7bcb", "sighting_of_ref": "indicator--0eb73e40-72ec-4cc2-a706-dfe82938d20c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4205f098-1262-4dbe-98e8-6f0315753b82", "sighting_of_ref": "indicator--606d6a6c-3695-4a72-96a1-da4aa7bfca9a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--637b176f-e1ad-4616-957b-a062ea49f481", "sighting_of_ref": "indicator--d5030c98-07b2-403b-b8cf-72ad7bfcfe48", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb4828b-0bf0-4ce0-b1db-a2378a52e6b5", "sighting_of_ref": "indicator--71b62c35-dfa5-452e-8dcf-9c8a15011bce", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f2d821-50d6-420d-91c3-6b8d2f9adbfa", "sighting_of_ref": "indicator--25f6859b-f59a-451f-a765-ea22626a390e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac7a444-aeef-4882-8320-ce561b89d7bc", "sighting_of_ref": "indicator--e92d1f8e-cb98-45bf-94f9-7388d548ef4a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--415a3036-e188-4552-8ad9-67a67bb7fb53", "sighting_of_ref": "indicator--b7cc1fea-3ed1-431e-8dc2-4a7474602d0f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f66e6582-4563-40f7-b8c1-0451e281a26b", "sighting_of_ref": "indicator--6a27c5ad-4a51-4a22-a4f6-022d62fb73a2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc067bc0-4345-4d9b-88b4-2694dd047f82", "sighting_of_ref": "indicator--563273f3-a064-452c-ba9f-f440974fb5ac", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602dc436-1293-41c1-bb67-6bb732b30bb2", "sighting_of_ref": "indicator--cfe723de-b1f6-4dc8-bc65-4799bb368b0f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fdf01a9-4588-41e8-85a4-08cb022573c0", "sighting_of_ref": "indicator--61b20b41-34ea-4363-996c-70d26017f18d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e70da43-4b02-4382-85b1-7855861b5598", "sighting_of_ref": "indicator--e8502168-58de-4a14-a172-ead3230adbe2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f32f8de-90d1-44f9-b5f8-33118bf38df9", "sighting_of_ref": "indicator--a55aa48d-92a3-4de1-8474-e086186510f1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2d9ade-ab66-415c-8dd3-9a7be93752d5", "sighting_of_ref": "indicator--760fab68-3047-44f5-8869-f35606df3fd7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d26254-3aa7-45ad-9ed4-4f8c1921f3fe", "sighting_of_ref": "indicator--f28e74f3-3ba7-4159-a167-a6ea15530658", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f7dc11-2a3f-40b0-beb7-98175feeaaaa", "sighting_of_ref": "indicator--f718a5ed-a7fa-4605-afba-c28a989ecb3f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2144d8e4-9537-4e6b-8282-6bc62be33cf7", "sighting_of_ref": "indicator--495d6d46-d144-41b6-993d-8cf4427b73b8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3da57e-2a0f-45a9-a46e-e0f3b787a111", "sighting_of_ref": "indicator--c93f1ec0-1d69-4f68-884e-c1fcde36df05", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f94c22f8-4e7d-443b-a994-fc897912f1f4", "sighting_of_ref": "indicator--e2b591f8-d0c9-4d84-bf18-981ed0992027", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adcc7710-def5-4b78-8b93-56f6233f69d6", "sighting_of_ref": "indicator--ee761bc4-acb8-4d01-af76-3bc4039f31f3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--794ca55b-8ada-474b-a292-7d82d2d0ba76", "sighting_of_ref": "indicator--ee761bc4-acb8-4d01-af76-3bc4039f31f3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418121bf-08d6-4a4c-af53-5d47ef595ea3", "sighting_of_ref": "indicator--44806004-906b-4d8e-8927-3f86024a08af", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b9954a-83e2-465d-a0f3-444b0a785c17", "sighting_of_ref": "indicator--1096b342-6841-44a4-b827-9f9ddd214c70", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20a5b96-8733-49ef-873c-842312a92cf0", "sighting_of_ref": "indicator--fcf63e2f-5c4c-4e91-92cf-8549b0ec878c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db9c54bd-ba7f-4bf7-980f-4e38a9b4b27d", "sighting_of_ref": "indicator--4114c64d-f7df-457f-a67e-6b8f5cf0bcc4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--499d244f-cc3b-467b-b610-c737b9e5d98f", "sighting_of_ref": "indicator--8408bc5f-8c81-466c-8905-7bf49568f9e5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--343e13ee-32a8-4759-892f-d50e9176547d", "sighting_of_ref": "indicator--3eb37f28-0120-4b25-86b1-477b999f9672", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13398932-aade-4cd9-b7c3-9ead163815df", "sighting_of_ref": "indicator--6c105672-f970-4df9-8d67-0c607712c965", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4c602f-d5a9-458a-befb-7df91be22e78", "sighting_of_ref": "indicator--3147e669-a913-4361-8daa-2bf83182bf1b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3c45706-ab78-4eb7-b285-9f60f0a2805b", "sighting_of_ref": "indicator--30b2c1fd-29be-4f7e-8f91-afaf40584ba7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c1c44c0-e030-495c-9b52-97c1973a056b", "sighting_of_ref": "indicator--71445d25-5987-49a7-894c-8ff538d9c5da", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f35db6-f47e-4efd-8b6c-384e75079366", "sighting_of_ref": "indicator--168b726b-623f-478a-beaa-13ca5932f696", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7ae353-ed3a-4509-9fbe-b3cbf1ae2b5e", "sighting_of_ref": "indicator--4ec10507-de38-45ed-b437-4b984b2c04d5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cde95d4-fb33-4491-bd8e-a56e03129a78", "sighting_of_ref": "indicator--69314d8a-8301-440c-85fa-473a5d8542c5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd579e2b-d954-4b15-b02e-17b7d54af430", "sighting_of_ref": "indicator--c551350e-3fcd-4a2c-8034-c844d4fddd28", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd76b3af-196b-480a-a015-2931f8e3fc5f", "sighting_of_ref": "indicator--a9879d26-3612-4e62-9b2e-b017ad77869a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9d03b9-c93e-4446-afb7-1a3925500f0a", "sighting_of_ref": "indicator--7afa7296-d218-458f-95c3-051c3a0f2a6a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b09115c2-b012-4774-8615-09632799f5bf", "sighting_of_ref": "indicator--37ee0871-2e98-47d5-bacf-a73df3460b50", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d20be4a-6d9e-42ab-8616-f2d8c8720ce4", "sighting_of_ref": "indicator--d9d0566c-e5c4-454c-9758-68ed5053c77d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c003f2be-384f-400b-86e9-c11ca52ce5ca", "sighting_of_ref": "indicator--6b605ed3-f169-4049-b065-1a5e22e09c49", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--660a0ffe-421c-411c-b1bf-e51e602427c4", "sighting_of_ref": "indicator--6b38a239-b22c-4015-ab2e-1ad354c49005", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa91eb9-b8aa-4821-b8d4-d6bac4216c33", "sighting_of_ref": "indicator--8aee3d98-414d-403a-9116-5cba72d68840", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f7d19d-5536-4e55-a008-0e1eb92f7145", "sighting_of_ref": "indicator--df4735de-66df-4694-8053-2a5473c7849a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f3dc76-d24b-4868-9ede-19bcde3724e1", "sighting_of_ref": "indicator--dab40b07-855d-428a-ab24-16209c042959", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ddacdb-d4cf-4d07-a010-52c72ac429c5", "sighting_of_ref": "indicator--d63dcc5c-2e6f-4aa2-a6bf-3b2babd6fd94", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203b1e83-5e32-4822-a399-db8c48dc6366", "sighting_of_ref": "indicator--1f072aef-a69c-4dfa-a499-dc38fc088d57", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570a3afa-dbcf-4789-89de-199f03b05ed3", "sighting_of_ref": "indicator--cf1ca21d-2413-4339-b338-921ab167600b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17657ac5-0d66-4340-9b83-e30398d2c81c", "sighting_of_ref": "indicator--e5e32e8d-0015-48b1-94bc-b9a418fc7ce9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c41a4f31-0e1d-400d-bdb1-277270b45636", "sighting_of_ref": "indicator--66921763-bc3b-4a84-a367-8d92effdf215", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86b2c975-a54a-42f3-8c3f-ba7b82af1acc", "sighting_of_ref": "indicator--5ca099b4-d1da-40e3-a738-0ac1fff3f21e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--423c3ee9-532a-4c85-91ae-dbe997284441", "sighting_of_ref": "indicator--4f9a7b55-c0ac-4edb-9fdf-ecf50135d5a4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96056444-dab5-4531-8cf0-f99255908a9e", "sighting_of_ref": "indicator--c963b226-5d97-46c7-b0b1-1f9644216e1a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29af5023-8bc6-48d1-aac7-102a33a4da7f", "sighting_of_ref": "indicator--0517058d-4edc-467b-b9c1-479509f7c9b9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2667017-490d-40fc-828f-2b4adaff2c3d", "sighting_of_ref": "indicator--b32279b9-820e-4430-ae19-7f82ef5dbc76", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd81dee3-619f-4df3-b0b5-eea25aaa172d", "sighting_of_ref": "indicator--1e80a7a2-6af0-48c1-a021-7ecc07668e46", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0969138d-9a4b-4d90-9ee6-d234702fd38b", "sighting_of_ref": "indicator--1e80a7a2-6af0-48c1-a021-7ecc07668e46", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9f91f1-12e4-45f7-b71f-9c4f346f6f96", "sighting_of_ref": "indicator--d96c8318-7433-41de-b1bb-fa72beb579fe", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc46fa4-da94-4bf0-9633-b77a1c16c7ec", "sighting_of_ref": "indicator--6f1e6d8b-0239-401a-84aa-6dd70eba0087", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--159dd352-41af-4436-bdc1-865c1bf967b1", "sighting_of_ref": "indicator--99e25854-b28e-43d6-b40a-39f72b3e83ee", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4285e4a-acac-432b-9e17-cebbae99f150", "sighting_of_ref": "indicator--30697b4e-714c-4930-8637-fae338ab1268", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914f315a-03f2-4a4b-aaf9-fd3f7e2c1bcb", "sighting_of_ref": "indicator--ef78b62b-63ec-41cf-b6da-527c9a0e3694", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3deb0603-fa66-417f-971d-0831014346d0", "sighting_of_ref": "indicator--891c30d4-8de3-4f84-ac21-844511fdaaaa", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535ce85e-535e-4936-a68a-ceb2890608b7", "sighting_of_ref": "indicator--10057b46-b688-4b40-9a77-e579d70ecdb4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa51e73-f0e6-4b3e-ab18-8e3265969fca", "sighting_of_ref": "indicator--dc51c886-8418-4b4a-8845-d9bd134b0b45", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b0a3f1-4bae-4f45-a003-fcb4c7e8935b", "sighting_of_ref": "indicator--075717f9-63e6-4233-8bfa-9ff9edf7ed7e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d1c227-bb17-42e1-8000-f1a0ee683495", "sighting_of_ref": "indicator--83829ec3-7455-44c0-a5ec-45d7f9d2c261", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f27f6f0-4aa2-40fc-bee7-34e0618b787e", "sighting_of_ref": "indicator--ffb1f171-e3d9-476b-8a84-2361219b57db", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6369f02-28ef-4a68-aa23-845f6661c784", "sighting_of_ref": "indicator--181f3797-6c36-404d-897a-48f50bfab947", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa22687d-9283-4ce9-8e43-d1f164dcc57b", "sighting_of_ref": "indicator--a256b70d-1a65-402c-813f-4ac3789447d4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a4218d-f668-428e-b6b3-9c0ce61d0d97", "sighting_of_ref": "indicator--0634065c-358c-44cc-be9d-4fd7cc918b69", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--682d6eaf-4f3c-4cd5-80ed-a3e5614b62e7", "sighting_of_ref": "indicator--39917706-19de-4e9f-9a36-06f0de883f04", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc541ba-a903-4a9b-8707-a0d5f68f7ef1", "sighting_of_ref": "indicator--6a857eaf-f4ff-4270-b209-99ff3107f594", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aac3f24-b87f-425e-8df2-dc19b22742a7", "sighting_of_ref": "indicator--5d5584cb-79e5-4cb6-8a19-d3fb605b35a9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d80c47-40ea-43c1-8c5e-69434e90c676", "sighting_of_ref": "indicator--d04abda5-3244-47ff-a582-98e9ee8fccbb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f41c58d3-db03-4206-b8fe-3ff8d9680ee9", "sighting_of_ref": "indicator--e8d26581-5aab-44a6-83f7-00fdf76552ec", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c35db4b9-54fe-42de-8d6d-8dced3fcd37f", "sighting_of_ref": "indicator--7a9728ce-e7d1-4ae2-97d4-bb5830e6f9e3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d5ae77-4e07-4c58-9b89-5b4fb41abe2a", "sighting_of_ref": "indicator--33f97de3-64d2-4080-81f4-3512496a9744", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0bb9c5-f438-44cb-8eca-21d8477c9dfb", "sighting_of_ref": "indicator--82850ac4-9615-42b0-8d10-d66a03f9a20f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e1c567-7cd4-4984-ac4d-292ad51a2cf8", "sighting_of_ref": "indicator--75a4432d-e065-4a36-b18b-6b80f4a87a0a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2bac1d8-0ced-4886-8709-724c9e497b58", "sighting_of_ref": "indicator--8379c529-0662-4d04-86a3-1c06ba386f19", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067782e5-de9d-4574-829f-c4a6f60fe436", "sighting_of_ref": "indicator--eed1686f-f121-4e70-b876-0df57432f4bf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9c7d1b-9431-43e0-b3a2-3a1e27d7139f", "sighting_of_ref": "indicator--72e3b2f7-62c3-42c9-990c-29e434ed2e29", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50139125-e0c6-436e-943c-c95334806cae", "sighting_of_ref": "indicator--a69f63ba-4861-4603-8122-a965d57db0df", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a87bcb-28da-4fba-942a-0645e692503b", "sighting_of_ref": "indicator--a6efe05c-6762-434d-96ed-8843631f4262", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39acdb62-a39f-4de2-b228-d060d00c5583", "sighting_of_ref": "indicator--0abf104b-fc4d-4ab5-b580-bdd3ad8a260b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7597fd9d-b2a8-426e-9a33-5e2c262b25fb", "sighting_of_ref": "indicator--23366bf2-70c5-473f-bd45-239f79ed4794", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c33e117-1c6a-4ff0-8ffd-be16b41d4ddf", "sighting_of_ref": "indicator--2c65c69c-5d13-49da-8ed8-56fa99abf6e4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7ddfe6-e18d-422d-83e0-216ba2b5fd5f", "sighting_of_ref": "indicator--13bf69b3-889b-4427-b934-9d821767b249", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a6f668-e7b6-412c-8bc4-d3811d18baaa", "sighting_of_ref": "indicator--f4277a97-6276-4a8a-9ba0-8d5d350e025a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67bb7799-5798-4fad-8e92-a7f0e2dfb71d", "sighting_of_ref": "indicator--9a9a7d5b-ce93-4328-bbaa-7c579a142d55", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9830dbcb-419a-41ee-ba40-27da35480f41", "sighting_of_ref": "indicator--2720cf11-3ac3-47e4-846e-ec110ce817e7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8609e77-8e82-4ca4-a6d0-c82213212a5c", "sighting_of_ref": "indicator--2a83eaef-6adc-4f36-ba2e-7fcf24bbf410", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c01a160-52c2-41bb-a632-e905155f78da", "sighting_of_ref": "indicator--ec660564-7c35-4496-9f9c-d276e0872460", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a19c543-0020-4424-9dc6-630f704dbede", "sighting_of_ref": "indicator--406a67b3-ab6f-4d6e-8e3d-6139ef691122", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45cc6b71-0499-445b-9cf3-0c8566c161be", "sighting_of_ref": "indicator--5e20611d-27bd-456e-a122-c745acdb9fbf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f8390d-af27-49a8-b248-3b20dc4e80fe", "sighting_of_ref": "indicator--5c01f13d-abae-40dc-b3ef-d3c466999f13", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc9f9a0-8d5e-41a9-ae22-be180e028fe5", "sighting_of_ref": "indicator--ddd358b6-8955-4e1f-9514-ee16c30ce599", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--692532d7-0e3e-4221-9bf7-5c67f0f522ed", "sighting_of_ref": "indicator--593ccc7a-ad5d-4270-b71a-e0440a5dfcd1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea97223a-b4bc-4332-b16e-fd1230da609b", "sighting_of_ref": "indicator--63771bd8-2ff2-475f-ae8e-82037f31512e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b69631b2-5b02-4283-97b8-3336a160ae44", "sighting_of_ref": "indicator--6270a570-a1f0-4976-9a25-c9c73e3dd1e3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31320279-5626-4ea1-ac42-06c9b3318d55", "sighting_of_ref": "indicator--dd7ff704-40f9-4a0a-a33c-5bae74f07892", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9cf90c6-d55c-4927-bf84-54d293289b85", "sighting_of_ref": "indicator--b1f28371-2556-4904-9ce6-c7e36bf5c6b0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae21bf6-9068-48ea-8990-9cf081431629", "sighting_of_ref": "indicator--de0fc727-c11a-40ce-970e-8875c2ee1585", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693ad9b1-9283-4956-a4d1-78718fcceb47", "sighting_of_ref": "indicator--e5448a01-5525-46dc-b29f-5e883e4ed3e4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13099410-8129-4c74-990b-817fea51545b", "sighting_of_ref": "indicator--531feb91-f8ce-4a04-8faf-ff2816b09b2a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9f6652-6535-4b94-a848-ee7fb4ccf50a", "sighting_of_ref": "indicator--e47cf35d-f04d-4ac8-adca-895e36f8ea36", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2193edef-4436-4f76-8a26-5dd1cfbcca7e", "sighting_of_ref": "indicator--409975f9-3a0e-45f6-a52a-7aeacd2d7f9b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9a6d1d-d42c-4512-acb4-9b757aae52e0", "sighting_of_ref": "indicator--160f2fbb-7f04-46dd-bd5a-91452ced20fc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefabfd0-9927-44db-a031-9cc901c28983", "sighting_of_ref": "indicator--5d3f3a98-4a1c-401e-b4e0-7f50bd687598", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9dd89f6-e976-42ab-863a-755436081844", "sighting_of_ref": "indicator--a2c42112-53ea-4808-b8c3-43188997a831", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f419ebb4-e90a-4b1f-a047-20894f93480f", "sighting_of_ref": "indicator--f78064cc-c1ff-427a-88d6-283df8ec5d5b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f874c0-b9bb-4475-a194-4d75ede7e62a", "sighting_of_ref": "indicator--36d99f7e-1556-414e-b440-4a7b28ae037d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0881424f-526f-4bd8-af53-891f655eaaf9", "sighting_of_ref": "indicator--349ad314-d693-44eb-8ea1-1f5c73e79bf9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c5e89b-5a7d-498f-bc8a-fbc5cbb48581", "sighting_of_ref": "indicator--9ee77fb8-9d52-40fb-b34b-8cdee6ec0d3e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782acf0f-57f5-4e32-8424-18d648cd3844", "sighting_of_ref": "indicator--ad777957-1aad-4263-aec2-56b94e837161", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814e77bd-d890-46a8-880d-6c44c659dd1a", "sighting_of_ref": "indicator--59a4fb3b-271d-4153-ac3e-dd2aa6744cdb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038c050b-5c7c-411c-9d62-23e5af28d0c1", "sighting_of_ref": "indicator--06388b1d-bcb6-4385-8fd8-b2bc8881ff95", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9be1ecf-a8dc-4576-af1b-a54dbd44c4bc", "sighting_of_ref": "indicator--f36d9f5b-6886-4294-bf59-00bd6ec9db8c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90235df-19fc-46b9-8205-a425c4740b6e", "sighting_of_ref": "indicator--2e0a0db3-28e3-4763-b1b6-ec751c8f4529", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f068cc4-67a1-4c8e-a15e-b419e80eae76", "sighting_of_ref": "indicator--f0993f09-3d3a-4a1c-9222-8ab4778d97f3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bfbe987-b496-4785-a9bb-989b56619201", "sighting_of_ref": "indicator--0661c085-9ee1-4aa0-92a8-9f2e2f4978c4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f11421c8-3715-488a-83cd-271ddcc93b2b", "sighting_of_ref": "indicator--206ce2d6-a503-40f8-8771-e9fb5a8e3054", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd902d2f-24b5-4bd5-a8fa-aae67904b208", "sighting_of_ref": "indicator--d180d35b-df30-4977-bca7-922f40b801ca", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6f91d29-e43f-40f3-b520-625d0f788394", "sighting_of_ref": "indicator--401aee4a-166e-4e5a-a933-e0ca266c3833", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c931eb21-b3b7-4d34-b93f-6f3195e84418", "sighting_of_ref": "indicator--6b92e76d-f83e-48e6-9516-e20ee3f80802", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4e41f6-3cd5-4ca1-8144-bfc86b228dab", "sighting_of_ref": "indicator--f68bc37c-f8b4-40d8-85f9-80f406c43038", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--716f629b-6cfe-47ff-bf61-131e631dbfdb", "sighting_of_ref": "indicator--163fc334-fe04-4f72-ac72-0f1e8b805eb4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8482731f-b833-41f2-b177-b318fe57f713", "sighting_of_ref": "indicator--07c8187c-6245-40e9-a2f3-dea42a21dedb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b90bc7-139e-427c-9de7-9894396a33df", "sighting_of_ref": "indicator--793e3f67-e77f-4964-9d5b-b713b7005cc2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea9f0ea-9239-4234-a78f-ec59f1ffe63f", "sighting_of_ref": "indicator--76394b30-ca9b-49ca-be5e-fb83cfdb7335", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a055c154-2928-4293-b5ba-e339e8d73f77", "sighting_of_ref": "indicator--8b255bef-d4dc-4319-8144-529007b006cb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7239ba-9438-402d-8c47-ffb427c19650", "sighting_of_ref": "indicator--6d659d4f-32c9-4874-8cee-601800a76183", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bdcaf6c-1e8f-4fc8-a952-fed032c5eaef", "sighting_of_ref": "indicator--755f546c-0302-494c-8394-51cb178d6c27", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed24995c-0f2b-42d5-b4e2-b68c7adad4f1", "sighting_of_ref": "indicator--7c5d5fa9-87f8-4f71-a48b-795210a13a74", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--630ceec5-8c9c-4a27-9cc3-780985996e8e", "sighting_of_ref": "indicator--985a94ff-244b-45b6-a5b7-0401ace58241", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba6e6b0-96b6-48f7-90b9-1bb22598764b", "sighting_of_ref": "indicator--f90ea91d-001d-4d5f-ace8-a914d2fee4e3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d039b4c9-8d57-4a73-88f9-182c4145677f", "sighting_of_ref": "indicator--1768505a-e7c5-4f68-b04f-8c98ea037ad3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9fa8acd-bdfc-428a-9f4b-736199bf79c6", "sighting_of_ref": "indicator--91b1d4b9-dd81-420a-9de2-c9c5389330d7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--028e3e86-8eeb-422b-a962-f36208744ed8", "sighting_of_ref": "indicator--c947c8d1-f9e4-4b47-9d37-1552e006b92c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a09ded14-90c2-45ec-bee0-89693d58951b", "sighting_of_ref": "indicator--c5a49dc2-5192-4abb-9f56-d7416a758e84", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b594b40b-8836-4176-ad66-6376da2546fb", "sighting_of_ref": "indicator--48383197-dfa7-4fb0-b4a9-e611ca046ce3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d564c9f4-bac5-4156-9966-e7f295a628f3", "sighting_of_ref": "indicator--a2d896f0-e11a-49c4-b107-af48d9e9b816", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db6bbe2a-73a8-4659-8f7a-41091b1070ac", "sighting_of_ref": "indicator--18bd825d-5707-4f3f-97fd-619e7bdae568", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6cf0d3a-4dcf-4e50-ba83-de9133aac397", "sighting_of_ref": "indicator--e18dfa78-3944-4bf0-8a36-05807a4d2bd8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4aa76af-3260-4674-8f5e-e2a6af6f42a6", "sighting_of_ref": "indicator--1cabed0e-72c7-4ea5-840d-f37af4ecf538", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3a1516-af2d-4421-b576-6b00ed83ae95", "sighting_of_ref": "indicator--8a793ba9-597c-4a74-88d6-17be2b02385e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31039a3-e2d7-4778-a6f1-d51edec36c02", "sighting_of_ref": "indicator--714b3b08-b437-429f-8113-8b171d148a6f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0781723c-1acf-453f-99c9-13bee6cc5d0c", "sighting_of_ref": "indicator--ba8af36b-2dc2-488d-a6e8-62a53c59e45b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf56fc83-dd83-4c97-825e-60a8928c1fbc", "sighting_of_ref": "indicator--3c78d3b0-73f0-4770-9ec3-304aa0f568bd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2701b924-8413-45c1-a516-3c55e60d29e5", "sighting_of_ref": "indicator--424f2b6c-9f74-4794-8ee0-366ec014e6d2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba493740-d149-4804-a2f4-028df2920d80", "sighting_of_ref": "indicator--214c9e18-156e-4c56-b5ae-68aaa0329cdc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c89e2c-7b8d-438d-bb1a-4d2f832fdde5", "sighting_of_ref": "indicator--10276176-6ecb-4cb5-89a8-8e178c21b0b9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--951171f3-2f88-492b-bae1-bbae3f27dc5e", "sighting_of_ref": "indicator--52b35ff4-cd7e-4a59-a6af-ad3eb58e45d9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9307a92c-409a-4e6a-a75e-54b79554ab8b", "sighting_of_ref": "indicator--01beaf9b-8ffc-4a17-95d6-89c667a9d972", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49b2610-fd27-4823-9862-b1f7bcf2ca8f", "sighting_of_ref": "indicator--0ce41644-bf2e-4d72-a156-c7d251e211cb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47aefadc-58c9-4308-b059-7e83aa8451c3", "sighting_of_ref": "indicator--5f82b0b4-2b91-40a6-b7a1-b96fed4a8f63", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9846cd46-2cad-4795-9a4d-4974dbac501c", "sighting_of_ref": "indicator--452832f0-fd2c-4bd4-868e-293e8c57ca27", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ccab38-cafd-4db7-897f-c5cba78d86a1", "sighting_of_ref": "indicator--2068e66c-079b-474c-bd97-ca7bf0bf0736", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1aa579a-33bd-47d6-83e0-c1d16a81ab71", "sighting_of_ref": "indicator--f8859c6e-10cf-4cf5-a337-1bba10e1da46", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ca9053-d34a-4b09-866d-04943d87c462", "sighting_of_ref": "indicator--7ca03433-7ef9-4f75-8433-c9d1a315607e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e389443a-be58-45bb-84d2-6a7555b15cf5", "sighting_of_ref": "indicator--c0fe46ac-9e57-42f5-8863-24bf0288fdde", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e799cdae-8124-40f9-9d3e-d91d91bdfbcc", "sighting_of_ref": "indicator--8051b798-5444-4205-9cf7-929e563006d7", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f03f1c7-324b-46bc-bc2a-35b278e3979f", "sighting_of_ref": "indicator--f48e145c-5009-41b7-8461-dd67c3898d77", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded0d493-f6b0-425e-9d0f-683a56cc4535", "sighting_of_ref": "indicator--048304a5-aa30-43fe-a9e5-49e68147dfb0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991b43d9-8b3c-43e5-bb80-6c77fe381648", "sighting_of_ref": "indicator--83c22de6-8157-444f-8df2-a2a8ebd923a4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de332114-b8be-425d-9981-aca31089eaf4", "sighting_of_ref": "indicator--6f124aa0-0128-4896-b5d4-97c3c6cb82c9", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d55fcd3-71be-4d2a-94c8-25d036020fe8", "sighting_of_ref": "indicator--bfa45de4-a7a7-4ea0-8b6c-c58c3bc5b047", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ba2616-2572-406e-ac95-8ad9537dc03b", "sighting_of_ref": "indicator--38ffb0b7-cbc7-47ec-a437-69b3790c8f31", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ee1be7-54a4-4a77-ae49-e6c5bb9fd5ed", "sighting_of_ref": "indicator--e2e00e63-4785-4185-883f-82d5380f96aa", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0790dd38-a937-4c0f-acfe-39a7ea83434d", "sighting_of_ref": "indicator--39d424d6-a9cb-425d-8fb3-b6ba5a5a6bb0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6591e6a2-ac49-4908-b264-a423cee4debf", "sighting_of_ref": "indicator--027a3783-9192-42c2-8d31-7f12fdb33b8b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5379224-e21a-4b8e-ac90-f77cb0c61e8d", "sighting_of_ref": "indicator--2de1ea5d-e145-419b-9baa-a36fa1a6359c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a6120e-5281-42f4-90e4-f090b30c1389", "sighting_of_ref": "indicator--17a6ef58-6d36-4642-92c9-2515b0125afc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619f6f4c-2247-4bf9-a7f7-c5caff9930f9", "sighting_of_ref": "indicator--3d28aad5-ca49-40bc-8b20-99a57e698e5b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b5d47b-be78-461d-bf9b-f620877d6ec3", "sighting_of_ref": "indicator--fb743e28-f2af-4632-a759-5d655a56e8b9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e5a4b23-7356-4f17-9941-c7c754c3d3a1", "sighting_of_ref": "indicator--10a8184d-cb04-4c88-9367-cca4b3894be5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc06b8d1-a7e3-4c9a-b9a4-a1b86d366705", "sighting_of_ref": "indicator--a8318f09-68e5-49d1-aafd-0bc8a0c1dd21", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa0db98-169c-4368-96bc-bbd895904d83", "sighting_of_ref": "indicator--2746d1b3-f602-44df-a2b1-9decb883b890", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8564ac-2520-4501-b5f3-158b58cbc0d0", "sighting_of_ref": "indicator--49790930-a2c8-4262-8eac-50bc478bdb22", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88da420e-3410-4547-9441-f0e74aaa737b", "sighting_of_ref": "indicator--e63c36da-fb3e-4588-a5af-fabc6e74a858", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb9536a-9584-4437-84e9-5319e124be85", "sighting_of_ref": "indicator--14b92f3b-bee3-4923-8cc8-010ba704b10f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be082ca-dfdd-477f-bb93-8d70d459bc8d", "sighting_of_ref": "indicator--69dca862-0afa-40b4-802e-5468c0c08ad1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09489a1b-1b0c-4526-9bd8-6c50f9b97d0c", "sighting_of_ref": "indicator--5858f9d1-225c-4352-a119-677b3308bb24", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b73dc8-e415-4328-bef6-d871b7072424", "sighting_of_ref": "indicator--2a140c52-b7f6-47e8-85a3-8109300f6c84", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac12f974-7acc-4e36-a4bc-9b9af90ef9f6", "sighting_of_ref": "indicator--bbf2a705-068d-49e5-b0a8-95518e9fa19c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f1bd18-a6d2-4323-92f9-739e63038334", "sighting_of_ref": "indicator--9782fd31-2bdc-49b7-9954-9bf80b3c82b9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f083d0f-7dfa-43c0-bec8-f2f0680c8662", "sighting_of_ref": "indicator--65741eae-cfc7-4044-9075-7a470148314d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a68e4a-54ed-47b1-85d1-16cc07f11354", "sighting_of_ref": "indicator--fc662134-52ca-4e8b-b230-15fa1c119851", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9779fdb5-493f-47e2-b047-4098481b4c32", "sighting_of_ref": "indicator--5bc42f32-1457-4775-b9cf-ef07c02bc98d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e903348-ebe2-4cad-93b1-1e5225335076", "sighting_of_ref": "indicator--e48fc339-bab7-4130-83df-3ba1ca23287b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af90997b-3f11-4f83-a003-b388776676c4", "sighting_of_ref": "indicator--66cda7e1-57f9-45f5-8df7-ee20149e8ae1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29aadb3-4285-44b6-99a6-5f08598566c4", "sighting_of_ref": "indicator--95469d5a-3415-4eef-a02e-fc203ffbef03", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35bb0e1e-9d82-497e-877f-a341e4697047", "sighting_of_ref": "indicator--36fc1ebf-395b-4515-a9d1-dc7bd94a4279", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738ad26d-1a04-4b54-a13b-f2400d7545b2", "sighting_of_ref": "indicator--e9933ea3-d237-4936-a563-41b5ec2a3c7c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28207a3b-d55e-48d2-8562-4a9315e890bc", "sighting_of_ref": "indicator--1e9e4f50-8252-4134-8dca-bc5e81451863", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70506804-be7d-4e9d-acad-806d925316e4", "sighting_of_ref": "indicator--d028aad2-d1bc-4fdf-8f6c-cb1ba184f45c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc12007-3ddd-4a15-8b87-963810cd2f0c", "sighting_of_ref": "indicator--48882c78-9a9b-447b-8414-2cc565e228a9", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc1863d-015f-45ea-8ea0-b799fbf2f335", "sighting_of_ref": "indicator--6068f400-d698-4e8b-8c7f-b7f73fbfa12d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b8503f-120c-48b6-8f2e-9dd7770c88ff", "sighting_of_ref": "indicator--c6e7bea7-a45d-4fe0-a3a8-5f8372441d5b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c85542b0-fa2c-496b-98db-0a927704a976", "sighting_of_ref": "indicator--2e3a82b2-867f-4a7f-80e6-b829241260d4", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1a2d6c-45e3-4925-8587-b4f5cff5d036", "sighting_of_ref": "indicator--67b30ce3-8745-4e71-8bfd-471f3ec48aaf", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9585d2-ac4f-4396-ac1a-3b323ad72f88", "sighting_of_ref": "indicator--67b30ce3-8745-4e71-8bfd-471f3ec48aaf", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d6a30f-455e-4277-83ae-108dd0838f6c", "sighting_of_ref": "indicator--ec380104-c3bf-4965-9db4-7a0993563d68", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e22ae8f1-7a00-49c6-8306-14afcb6137d3", "sighting_of_ref": "indicator--f73c5285-b4f2-433f-a4df-d36ce91e5978", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8365a27c-2491-4c35-85e1-e2572230f133", "sighting_of_ref": "indicator--b30d7d74-967d-4303-85d6-03b0a0c2152b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb08aa5d-b00c-441e-a16e-f215e1a15685", "sighting_of_ref": "indicator--d290c705-2acc-4473-af34-072106570bf9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0914c370-1ec9-45ab-bf45-fbb1b9698f4a", "sighting_of_ref": "indicator--75901342-5bea-4960-9537-f2917b931c19", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cef090b-3c71-4454-ba12-e09c9af8bad3", "sighting_of_ref": "indicator--2f8aa981-c2d5-4031-95a9-cff710ef5d91", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f8f706-0e4e-4aca-91ce-3ab884e87b89", "sighting_of_ref": "indicator--073239c5-b8e3-4267-9fa2-38d10666321a", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b4a0f4d-e9b2-4547-aada-ac5aa6d0ad0b", "sighting_of_ref": "indicator--c6b35657-224e-4cf0-b53d-f2992394af70", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1909656e-3edc-446b-8553-647862875bec", "sighting_of_ref": "indicator--1504f288-dc5f-4fda-b6e2-6700ef6c9070", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b20493b-3cb8-473f-8d09-b4828d430439", "sighting_of_ref": "indicator--ce3509cc-0c65-4bcf-b682-4eb71c39b77f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea24b633-5281-45c4-9e52-894ee5c9f3bd", "sighting_of_ref": "indicator--ccd01ed6-ad41-4956-9d32-3dede54280e0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d93b98a-b5b2-499f-b06f-5f691099d89c", "sighting_of_ref": "indicator--f5402836-3a21-4154-87b3-9c39b37a9bec", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473ad5e8-298b-4358-b81b-b8a5632e4d61", "sighting_of_ref": "indicator--7bf9b159-ca18-43b7-a650-8707ac1566c7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66fc3e01-f6bf-4132-ba1a-d1e76bd76fa4", "sighting_of_ref": "indicator--f96a251b-7792-4c20-aabe-b0840d5ca56d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678af88c-40bf-4454-8784-f1cdee3d8368", "sighting_of_ref": "indicator--a5268b0c-2045-4274-847c-18cfa39ee0b6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a207d2-5bbf-4d96-8290-81ec4573ed94", "sighting_of_ref": "indicator--8e06bb7a-bb22-4849-b07d-aaeb07c857ce", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f6b22e-7a79-41e3-83c9-bad6e56f7641", "sighting_of_ref": "indicator--1b9c07d0-3598-4528-9cca-3a9b2c3d6231", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8c53ce-eceb-40e3-b434-a2dc6788153e", "sighting_of_ref": "indicator--68a7d465-4e61-4fce-8a25-1748ef21801b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b5ff9b-690a-4b8e-a194-9b5efac00b5b", "sighting_of_ref": "indicator--64bfda7b-759f-4c54-864e-07fa9e630e35", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c08996-1ade-45b5-8201-243ace4ed9a1", "sighting_of_ref": "indicator--af1004a2-b949-4570-9fa8-28e337d4043d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebaea454-791a-4884-82a6-67220ca23813", "sighting_of_ref": "indicator--f713f60f-3c1a-4184-86ef-059eaf9dc477", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6043e066-3a6c-4b70-bf33-b9f550cced0d", "sighting_of_ref": "indicator--7dbcf81b-981a-4c6a-be0f-d6c1ed876216", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5816c328-77a0-48dc-8ccb-606259256f9b", "sighting_of_ref": "indicator--c642c91b-b3c0-48e0-9767-8767cc675710", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4a16e7-6f2e-4b23-b3f9-04768380c210", "sighting_of_ref": "indicator--306b7e43-aeb9-46f2-bb73-75585f198a06", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7dd0d0-f05a-4c7f-9210-f04d03c03e09", "sighting_of_ref": "indicator--e96ae6a8-13f0-4c1a-a6e4-760b44556aea", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff52e27-9daf-4727-bc37-7fa2a10be82d", "sighting_of_ref": "indicator--b95b4786-ace6-43d3-bae8-c794d8cb0476", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0de385-41e0-4a5c-b3db-2b426969ddb2", "sighting_of_ref": "indicator--6ead4e48-cd57-4251-b8da-8c0111e8f742", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c080999c-4f79-4c6e-bc26-efccdbf3d939", "sighting_of_ref": "indicator--13f29763-c846-41cd-93c0-38015f5bbe32", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5acf8448-0e64-4073-a83e-96ca7a77946f", "sighting_of_ref": "indicator--cfafd2b1-3c9d-46f9-b494-60a523d4452f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc1960c6-96f1-424f-acad-41adbf27f22b", "sighting_of_ref": "indicator--aeca708e-92bd-4480-9187-9f420c9cc980", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5491ba87-7659-49dc-b5a6-042756ba3d9a", "sighting_of_ref": "indicator--8f4b0380-aeb8-411b-bcc2-874a358e2ec8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40b1a3da-fd19-4679-b12e-b6e83568a2f6", "sighting_of_ref": "indicator--350bb3b3-f13a-475a-9e29-6c51876d0b60", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb789df-66ce-42a5-a800-d5bedac0fe6a", "sighting_of_ref": "indicator--e8589c42-fba4-4afc-9172-5c06623b88c3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--371ff274-7eb7-42e8-9bb0-dd3a360386e5", "sighting_of_ref": "indicator--d2c05836-132b-495d-a3a7-89ef3ca4f5ce", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4b6e1e-5f68-4f0d-b99b-0c0c1e691721", "sighting_of_ref": "indicator--a24ee9fa-cc78-4ff2-947f-a77d57f43ab0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a759a5e3-3f6e-4e50-b68e-8b42a14c4a25", "sighting_of_ref": "indicator--a7766478-e85c-4f45-9df7-7474229b7bf8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11fb2261-e20c-4a5f-9a8a-2824af25cd5b", "sighting_of_ref": "indicator--5a0538b4-c111-40d8-a92e-fc1c513af707", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e0bb4f4-eca8-464c-a38b-b28ad62668ad", "sighting_of_ref": "indicator--aeca5ace-5447-4863-9ba0-1a169438f908", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a18eb7-78c1-466b-8b8f-689eff4fa2b6", "sighting_of_ref": "indicator--c765967d-9340-489a-af62-dd5ee0b3507d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0cbb8af-2502-44a3-8117-d383f46896e6", "sighting_of_ref": "indicator--85918f48-03b3-4867-b570-2d305b14a857", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a162c4-ec46-408f-bb73-3a41dfae264b", "sighting_of_ref": "indicator--2731c0b0-06e7-448a-a3b0-861f0f17e23d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8dbda9c-7915-49b7-9312-52268b065331", "sighting_of_ref": "indicator--4130e902-413a-4c7a-a5a8-41ea224a6c3e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0212fb-0802-4ed5-af40-96c0b9583f00", "sighting_of_ref": "indicator--d20aac75-b00e-466a-b11d-93dc01c221e8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0357422f-c4c7-430a-a00f-b938885e4de0", "sighting_of_ref": "indicator--026566f2-169d-48dc-a4d3-4d8118f5b049", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c77b28-0589-488b-861c-583272da1bac", "sighting_of_ref": "indicator--10a0bd27-7a9e-4c1e-a998-b11e0d8f3eb7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04964ab-1a2b-447a-b256-1e48483f0259", "sighting_of_ref": "indicator--66b58248-1175-46d5-8b7b-036676d509ef", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48977b8e-ff8d-4980-82ba-1875a9ec620e", "sighting_of_ref": "indicator--2c1abcd8-565c-4ac2-8732-6585d8aa0cb6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de30445-7972-48f6-9cf1-1d947744ab67", "sighting_of_ref": "indicator--15d3f65d-2015-4050-a58f-dac7a9f03481", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17987cdb-87a3-4ccd-90c4-d0e163155f10", "sighting_of_ref": "indicator--d53c4cff-dd94-4c19-923b-b233faf0e12c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3b34ef-1f87-48f3-95d8-5e451c160d4a", "sighting_of_ref": "indicator--dca87d4b-0079-45cb-aa51-2d1ecb42f7a5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d02288-a4c8-4dce-aa73-d3f15d654ba1", "sighting_of_ref": "indicator--e2f77dc3-cd67-4046-9e09-5e922830bd04", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75fa345c-bcf9-4c0e-8aea-c6f317c38146", "sighting_of_ref": "indicator--f9299804-0310-46f2-a6ce-13dd2b0986af", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee6bfef8-f03f-47d0-bba1-ca0e5c292c54", "sighting_of_ref": "indicator--455a4ef0-c521-42ad-8af8-4d5031243985", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f88fce69-ce70-4ab9-afaf-d7cbb730f5ce", "sighting_of_ref": "indicator--44b5cc63-d46d-4d62-95c0-dda575bc714d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15093a5d-56ed-4d38-9519-61a649a379c4", "sighting_of_ref": "indicator--58e912f8-6450-4047-929b-f989deba8e91", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac4d7b9-0334-42e2-8641-acb8d7f74414", "sighting_of_ref": "indicator--15e4fe6b-0908-4cf0-8fcc-73d116f23ac4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90aba9d5-7ca6-4b36-92e5-34f4f64ccece", "sighting_of_ref": "indicator--78c6ae40-2f85-4ab7-b027-13b5d23dcecc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e9eab6-83bd-41da-90b0-52b1399f2418", "sighting_of_ref": "indicator--7a8c110e-1a8a-4f16-93ba-455f0ea50f2c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--747cf16b-f6c8-49e4-a3b7-3e4f5c0d1fff", "sighting_of_ref": "indicator--5a0087a5-5255-4c64-9136-19280993e1a7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ec98e2-4e58-48be-b0cf-ccf0d16a19b2", "sighting_of_ref": "indicator--49e5a0b5-f2c9-407a-9f5f-ef88bd0d48cf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf996c2-f144-4d58-a71a-22dba47ea750", "sighting_of_ref": "indicator--b342ef18-0980-46da-9c11-d3ac418dce81", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e48873bf-cbfb-4c2c-ab6a-287c1ae574b2", "sighting_of_ref": "indicator--8b49e1df-eb1a-4d42-8f04-57293f1c75be", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec2bc9f-e50e-4752-b508-538d80fe3613", "sighting_of_ref": "indicator--84a564de-309c-4d64-af3e-e444db576693", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50132cfc-c660-49c5-a68f-6f92dbc46973", "sighting_of_ref": "indicator--6a683af3-854d-4f8b-b44b-0c3c83bf0838", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ceadcfc-2541-4aee-a251-79ab7f37b405", "sighting_of_ref": "indicator--98c34c00-06fd-41f0-95be-d65494fe0f33", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd3f1dc0-2d33-4c86-a92f-9bcbc33a927f", "sighting_of_ref": "indicator--dc636351-f380-433b-aa29-aab80b9203fe", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e200453-ed70-4ddc-915d-30ac8daa4cb8", "sighting_of_ref": "indicator--7e2ce119-7e97-4884-bd0f-6ce62c5b83fa", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f84041-9094-4994-84b1-141e9eee0dd2", "sighting_of_ref": "indicator--675e11f5-d461-4548-ae69-767df5a371c0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589364fc-ddd0-41ed-842b-9633fd594dbd", "sighting_of_ref": "indicator--8b7cfcb9-163a-4cae-95d7-24d6cd68e1db", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bbe5d24-3de7-4f34-9e7f-4316fa6a7227", "sighting_of_ref": "indicator--7a26a20f-fe38-46ea-99f9-1d755a988b9d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18fa091f-c97c-4b90-bf92-644bc05e979a", "sighting_of_ref": "indicator--bc8accde-b990-4abe-83dc-70c21e8bfed1", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4af416dd-9e2b-4d4c-a08b-b31baded20a2", "sighting_of_ref": "indicator--affaf42d-861d-490b-ac1c-84e6162db6a1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac41806-b2db-4c4e-90c9-367f2db60fce", "sighting_of_ref": "indicator--39365f97-4d90-42b0-9f7e-258f51f13dab", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb2d9df-234f-4d16-b161-2ee7ce45598f", "sighting_of_ref": "indicator--5fd42f3c-becc-473e-b46f-1f28c5098f02", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a2d1bb-5c11-4f01-8cf8-cfee3e1b0349", "sighting_of_ref": "indicator--d4ed7c99-bdd3-41ff-902c-03cd81a4f92e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc09577e-4220-4602-a6df-e8906066c660", "sighting_of_ref": "indicator--2d17e65d-2574-44e6-82e5-4c1acf249d4f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4594fcba-78b9-4a63-96ba-6470a74041df", "sighting_of_ref": "indicator--806f35d5-1257-4211-939e-83ddb5b01446", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419910f4-caa1-435d-95b5-fa8f2c767df6", "sighting_of_ref": "indicator--863a9954-95b7-4e68-b966-0b28ff038597", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccfd3a96-46fd-474a-a3d3-705b1f8f9ceb", "sighting_of_ref": "indicator--77affb97-71f4-40d4-9750-cb095da065c4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6d825f-e0c6-46fd-9dde-9ddd4e3efe7e", "sighting_of_ref": "indicator--8e1a3bfc-940f-4db5-bb20-efdaab013bbf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400771a7-9397-4eb1-b4fc-220040c0867a", "sighting_of_ref": "indicator--f4899c28-403d-408c-8b23-a8bf948f359b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1435bdbe-62c5-4bd4-a069-9e54b5580219", "sighting_of_ref": "indicator--aac80527-00a2-4c65-8622-a8aa3930ad7a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9803bd89-5955-450b-a829-bf0da8a712c2", "sighting_of_ref": "indicator--6392b8a6-7818-44a0-a104-a12e7e634549", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d12204-4b86-4e10-98fc-cd4df1314a76", "sighting_of_ref": "indicator--16997dec-c4a8-4b75-b2d6-85c53837000a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52fb86e9-be7a-456b-84bf-1e989f1a52bc", "sighting_of_ref": "indicator--b65c1bcb-3072-4e03-851c-68119ebc2d28", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e1fd2f-1c47-4c62-8b2e-775d6ed2f3b8", "sighting_of_ref": "indicator--53679978-afa9-4030-91c9-aa588d88c3a9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c582bb15-3017-4cad-98a5-2c733afb728b", "sighting_of_ref": "indicator--554b2822-37a3-4527-9e2d-d33d567ca550", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--122f172e-f81f-487a-944f-4e7f0b9ce678", "sighting_of_ref": "indicator--bca5bd13-7ee0-4272-8f41-e0052a76bb2c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e240780-19ba-4229-ab5e-04c2c5ec08bc", "sighting_of_ref": "indicator--48b05915-6a97-4f0f-8ac0-0dc2e11bf567", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56aa6a1f-f6f1-499a-91b9-7b324ac76160", "sighting_of_ref": "indicator--e24a476f-13dc-465d-a14c-f41984701281", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f41e843-33d7-418e-b175-a4b8417cd3e8", "sighting_of_ref": "indicator--f26e7f53-696a-4a6f-aabc-a8f0f719fe17", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a76d41-fece-4ca5-bc2a-22489d13eac3", "sighting_of_ref": "indicator--f280ffc6-c2f5-4b05-a288-ef736dff074d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4658029b-34a5-4517-bfa0-8b52aa198d44", "sighting_of_ref": "indicator--d29ff5ef-ff78-41a9-af04-f2a250c03274", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c2316c8-6da4-4589-8cca-90cc7d612de8", "sighting_of_ref": "indicator--d0914e4f-3d8e-4e72-9ee3-acf356d6a492", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b7de1a-611d-4dea-8764-44b1f26d3930", "sighting_of_ref": "indicator--5253cfe1-2666-4471-80cc-78ba62707112", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece2e300-f4be-48ba-bcc7-083b4b380d38", "sighting_of_ref": "indicator--fa773582-5ad8-48cb-92d8-6907db0377eb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c55291-5742-4ffc-846f-abf0e06c114a", "sighting_of_ref": "indicator--f28fd6d0-b0b3-41da-8798-47f3f7d6832e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f82a1de-8f04-4109-8e02-1ad55464cadf", "sighting_of_ref": "indicator--503f1c5a-f4c4-42cb-88f0-8a13515d79b1", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7260f642-4fc9-4fac-8fd6-5b40eed0bc7e", "sighting_of_ref": "indicator--f68f718f-1b1c-4d94-a75c-932b1bd6d15b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6506671-9b1b-4ee7-971f-1ecf30a09454", "sighting_of_ref": "indicator--80ea1243-81af-4b01-94f1-26b8c1367491", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad0931c-809e-4261-a52d-c013b73127c8", "sighting_of_ref": "indicator--8616dfcd-b093-4cdc-aa5e-cae33b7a6fa6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e88a5d02-15b3-447d-9366-af4020ea3d26", "sighting_of_ref": "indicator--1e2a79d0-047d-4941-bc78-6d24b82f0121", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d9a027-bfc5-4396-b0cb-1500681046c8", "sighting_of_ref": "indicator--de99debd-620f-41de-84a7-ebf3908e8259", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd14f1c2-9875-4425-9595-4531f1d87b06", "sighting_of_ref": "indicator--de99debd-620f-41de-84a7-ebf3908e8259", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3694aa74-bcbe-436f-b614-d7fb7fd33344", "sighting_of_ref": "indicator--e08716c8-7b16-4c46-919c-04366031cc1b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d7b32e-1748-4d8f-bcca-ca0bef80ab90", "sighting_of_ref": "indicator--cbe891fe-3675-474c-a177-85cacb9a7c0f", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eee1ab7-2784-4e7b-a431-23328475d77c", "sighting_of_ref": "indicator--c080f541-b8aa-4934-a4a2-e6e87945dce7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec52c28-2409-44ae-a16f-e5dd0a8476f4", "sighting_of_ref": "indicator--a30c7711-424f-46fe-9180-ec1e57e25240", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93d400e-c820-44e1-8927-5377e47b93b8", "sighting_of_ref": "indicator--f313de1b-6179-4eb6-917f-6d63d3a05f85", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--469c7338-c5e6-4033-95db-e30395b7c1c3", "sighting_of_ref": "indicator--4c65949f-2e3f-484a-a0c2-ab848da2248b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ff0c68-49b1-49eb-9a65-2c03bb70b755", "sighting_of_ref": "indicator--0c738dd2-098f-4257-926d-d6c7751cb349", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35a271c-2ab9-44de-8e48-06cb0bba44bc", "sighting_of_ref": "indicator--827bcf12-f408-4f3a-83ec-169b8d4d94d5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e304b151-7b06-4536-8882-42965e543c24", "sighting_of_ref": "indicator--6f08b72d-37ad-42cd-b412-5407997557a2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fdd034e-c905-4b96-81a6-4fa7c9e557d8", "sighting_of_ref": "indicator--40cb64cf-ab0c-40a3-bd25-b5ffd2bb56ef", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6835175-ec0f-4725-833f-b071e37d1d36", "sighting_of_ref": "indicator--3b45c744-4915-439b-9cf8-5699ad374422", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb015c95-b0ee-4707-8754-f9600ddd96e9", "sighting_of_ref": "indicator--1b446c9f-fe10-49c1-ab30-38458fed9158", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f82161-4a97-494c-b6b4-bcaf700a8435", "sighting_of_ref": "indicator--59a75fb2-f6a4-4cc6-8989-9fc252484e28", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c97d84-3fc5-4441-af6f-f377c4281e8e", "sighting_of_ref": "indicator--5474f36f-8355-4d2b-852d-ac874a09dbc7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b4b8a94-7529-44e1-9172-47d1eba58ca0", "sighting_of_ref": "indicator--e581c982-2699-4995-9b35-c1888d125e3b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c7a2bbe-ff52-41d7-9fe5-80114421f94d", "sighting_of_ref": "indicator--1fcfd5e8-f106-421f-90a7-22ac582825aa", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8419ec9f-baa5-4101-a031-c94811d517e1", "sighting_of_ref": "indicator--bbad11f4-49c2-4726-8fc4-d1171ac76af3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a51e7c9-ac81-41fa-98d1-7d34e2c643c4", "sighting_of_ref": "indicator--a66eacd7-e74a-46bb-8c4e-a2f98d772135", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--051a99cf-876f-4222-a31f-440fd7024a97", "sighting_of_ref": "indicator--a8744215-6731-42d2-bdbd-015906d44d35", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11bf3e34-43bd-40a4-a5f6-8084fca415b8", "sighting_of_ref": "indicator--9a02c0b3-9637-499b-a4bc-557211f58d7e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1062005-979d-4066-a1f3-a3f825504637", "sighting_of_ref": "indicator--bc5657dd-e66c-428f-8a22-74edad774ef0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa912cef-9b22-4dff-b020-a1e38577517d", "sighting_of_ref": "indicator--325c03fa-162f-4d80-bf18-c2ce1f1604d1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4847ee4a-b46e-4ac7-8db8-dd3baa7d2186", "sighting_of_ref": "indicator--7859870a-b0bf-4253-ac3b-e93ada8cfee8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde8bc03-4afa-43a9-a585-4d3e0c28d2e4", "sighting_of_ref": "indicator--4d07d1d2-ec05-42e9-b83a-8aa85f4c84b1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec2cd57-6076-4ee9-8a3a-85e500fb1e42", "sighting_of_ref": "indicator--1af5d996-8dcd-4728-a292-df1beb28a3d2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da626fa-d2d0-418d-9d7b-c4e1b0af482b", "sighting_of_ref": "indicator--21885d38-2e0c-45e0-9919-5e17ade58210", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411401e0-e682-4c2b-a440-752b0d02399b", "sighting_of_ref": "indicator--42f11306-4786-40b7-8b8f-3329d7ce12cc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6fcbae-dfe8-49d3-9c12-0b8398027984", "sighting_of_ref": "indicator--da9fd98e-3359-42ea-bab6-09f5a7ddb3b5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e8b95e-4290-463a-990c-3ff51baec0d1", "sighting_of_ref": "indicator--0bfa0c92-68be-45a7-b042-1acb514a5a64", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad921360-9e65-419f-b80c-da005d5ba55d", "sighting_of_ref": "indicator--2b775a3e-be61-466e-8b2a-b41ee269d427", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aacf73cf-5778-4e0c-9859-00f32c6bb654", "sighting_of_ref": "indicator--cb202277-4cbf-416a-85a3-60d38a46cfb0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db14ab52-be98-405d-b539-90d2fe0107f0", "sighting_of_ref": "indicator--69e3e4a7-fbd9-476a-94b7-52be86c4ab1a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b9887ed-966e-4ef8-b2d6-f5b369cd1cee", "sighting_of_ref": "indicator--2f40586d-b029-4c3f-b88d-be843c83767a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec95977e-8179-4e81-8cd6-90352e983bcc", "sighting_of_ref": "indicator--41bc6eac-9f75-4655-a1e9-6d165fcd79cc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5090d838-ac67-4ba6-8b40-0a3747f6ad45", "sighting_of_ref": "indicator--5e77d3bc-ec8a-4e66-bdd1-56866cec59ee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c5ccab6-54c3-4882-96b4-fb75a189a45f", "sighting_of_ref": "indicator--3f3d999c-824e-4af6-a96e-705a7701f75c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503ae5f0-d485-461d-8914-b58ad9def33a", "sighting_of_ref": "indicator--a1133fa6-af6c-44f5-a2f0-91e0d1a49bdf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e6d456-c773-4468-9545-d974c296cba3", "sighting_of_ref": "indicator--1fd61fc0-b0e4-402d-96ba-7a7dd83364cc", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0415d694-2453-4866-8260-7e69024a2802", "sighting_of_ref": "indicator--1fd61fc0-b0e4-402d-96ba-7a7dd83364cc", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ade97e-7f5a-44bc-83fe-661008c65750", "sighting_of_ref": "indicator--84060fa2-3b5d-4195-b652-d3dd40042c07", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cfe57ca-2813-4b57-b65b-50619cb8c34f", "sighting_of_ref": "indicator--08eb9725-6dcc-4ddc-8e5b-d1da1afc5962", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70739fad-365c-4785-a836-578a4a2c715f", "sighting_of_ref": "indicator--973e0fe7-0cac-432e-9bab-76b7b414843d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6cf05b-e2d8-4e8f-bf45-a432ec2ae0e6", "sighting_of_ref": "indicator--4606a380-2454-4cf7-956e-cf9befc4ff9e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b409d5-8c9c-4113-8397-145b0f2b79a0", "sighting_of_ref": "indicator--6552ad32-a2b0-4d52-8bfc-24be68442f89", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e0177b-ec5e-4557-b5fb-7a3723ae459a", "sighting_of_ref": "indicator--ff21cdd1-9c1f-4a6b-9a55-c385a9bcfa5f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b988137-d568-44f1-8fed-e466505928cb", "sighting_of_ref": "indicator--7837ae10-af0f-42cb-b144-c51d062885eb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365b5e83-b316-4e00-a2a0-bcbc0c53c588", "sighting_of_ref": "indicator--23ed268d-7570-42b5-95b7-74908cc880da", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8684a7d5-5de3-4353-8fef-9bdbbd53bc70", "sighting_of_ref": "indicator--e401b7c0-c36f-4e00-8a34-1a04834d57b3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b2c627-abcb-4440-8d63-5d8eb5699199", "sighting_of_ref": "indicator--a6e871df-9b69-4daa-bd03-d149e44b7ff2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c6a0f07-360a-42c6-9081-5424618be11d", "sighting_of_ref": "indicator--a59190e9-1f9b-40b1-821f-a9f8586f2dc2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99146ebe-9df5-47f3-9ef7-41609728318b", "sighting_of_ref": "indicator--61a20546-40f0-4661-b949-5c2984fa5d08", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b4d66a-d679-412f-9a6e-da839fcf5cca", "sighting_of_ref": "indicator--02cac8d1-60d1-4c43-9c52-059f8c52fad2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cb7d489-9196-46c2-a70a-52bdbd282aac", "sighting_of_ref": "indicator--ebe9b08d-7c8c-41a1-82f0-0dedbe982dfb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fdeeaf0-a8a3-4b22-ba0b-2c6776870149", "sighting_of_ref": "indicator--a9f7e29b-76b0-4f27-8559-afc47595d8e7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6294ae16-10b8-4a88-86e8-d690ce665d1c", "sighting_of_ref": "indicator--b8b96c4f-1bb1-43c3-b4ff-86823f59feca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b62da8-a384-4180-b454-b679cab4b7b3", "sighting_of_ref": "indicator--6831b107-9990-4527-8889-7413826ed593", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da0ef1b8-8f5e-4d8d-8a0a-0b41342e7db5", "sighting_of_ref": "indicator--dd23f5c7-5e71-4eea-87f0-b803fe668751", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63dd7d1e-1a86-4d91-9c17-af901cfa92d3", "sighting_of_ref": "indicator--3c0d3dec-2501-4673-b623-6c0ad2601f63", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79bc07e4-8ca0-4f4a-b56c-7a862761cf5f", "sighting_of_ref": "indicator--afb3ef87-cd08-4ef1-ab20-eeb35291f002", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d99cb2f-7aed-43cd-a1cc-b16a5b8e5c5f", "sighting_of_ref": "indicator--e40f8912-7fc2-4d51-93cb-1577bff0f774", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e5bd65-e66d-42d6-8b93-d32c4a6802a1", "sighting_of_ref": "indicator--a4831f9a-439c-497d-b49b-f8ecc11c5a3e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344b65f9-1832-4781-8efe-31cb576aef38", "sighting_of_ref": "indicator--aaf20f6a-d6dc-4fe1-a74a-c1a2d240c058", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f654dc1e-e81b-49aa-b828-fa95456d5d2f", "sighting_of_ref": "indicator--63c78a45-26c2-433f-930d-a9fcae9ae554", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6def2979-473c-40ba-864d-da3f97544565", "sighting_of_ref": "indicator--10aa14c3-5b59-4d76-9916-e66ef2090f1c", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb33093-3456-4512-b7a9-529799b12ad8", "sighting_of_ref": "indicator--969e2a62-65fc-4205-89a4-2ce480ad8c53", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51e06d5-5226-4fac-9ce5-d24512396c83", "sighting_of_ref": "indicator--924ace83-3c0a-4b31-a2dd-9239ecaedfb4", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3412a5ab-c5f8-4615-8387-0f29bf48297c", "sighting_of_ref": "indicator--660b92bd-2340-497c-8130-e99fa2cba76b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc40258f-c361-46b4-a7a7-fb8d40d2838d", "sighting_of_ref": "indicator--87f5bc75-24db-4596-878f-2e27980996c4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9492f5-0a4a-4808-857f-c4cce0a84d97", "sighting_of_ref": "indicator--25383e53-9b24-44d9-8ad0-75e4d921c74c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f210498-d10f-479b-9916-11124b83a4b0", "sighting_of_ref": "indicator--25f5191f-c18c-4fc9-8fae-d1a5fce49ad4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e7a655-2562-4b59-bb0e-3bc9bc260ee0", "sighting_of_ref": "indicator--c9e0aaf1-dfb1-4dfa-8e68-cb81e824d63a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5675a63-bfda-44f6-9f42-90a7bc1a4e5a", "sighting_of_ref": "indicator--c32f563a-a13a-4bcd-9c38-77ddf59a0e53", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2658fb-c28a-44de-a8b4-13e05f9afb65", "sighting_of_ref": "indicator--f92c8d43-e506-49ce-869e-c61acae92511", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb65a09-5ed8-4bcf-94ac-495b87692f8e", "sighting_of_ref": "indicator--39a8520a-0c40-4f67-b05a-d9f4c6191233", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--249dd965-f447-49e0-9f65-7873ffaf09e1", "sighting_of_ref": "indicator--8d12178b-8acf-4c01-a754-f830dfb59863", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d6b34a-768e-464a-a454-f26f653948b2", "sighting_of_ref": "indicator--5493b8f4-93eb-4044-a2c1-2aec49bb5182", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc033e55-97ff-4a4f-a092-b4b5eb5802b6", "sighting_of_ref": "indicator--fd60bc4b-c480-4f8a-8836-c7a928104a51", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf1292d-8764-41c5-b8ca-4dc097e7512c", "sighting_of_ref": "indicator--9cb10e82-0daa-439e-a4b7-2fca63e01140", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0bff90-7b7a-46e9-bb9f-c7678ecf03b9", "sighting_of_ref": "indicator--3d8c662e-bcd4-455b-917b-5bebb3f57dc2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c384da-06b0-490e-a3d4-9a6df6c88d53", "sighting_of_ref": "indicator--db2299f9-d07b-4ad2-a653-59c827ad3241", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f16f3f-6520-4d94-bd66-187d7d3e0960", "sighting_of_ref": "indicator--1db8c0e5-b441-435d-9c3b-3ec082e7ef26", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba275d3-6756-4dc2-bb5f-941d403a2720", "sighting_of_ref": "indicator--55abc2a7-f235-4d41-920d-a9ae646a35bd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--844ecc4d-7228-4a50-9fe8-27c4949ab40d", "sighting_of_ref": "indicator--0c30cc33-f04c-45dc-86ae-148aa7889777", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8430bce9-3ecd-42e8-b02a-8e7b9da35ddb", "sighting_of_ref": "indicator--36984360-c839-4277-91a0-d257a3bc1e75", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa92eb5-4522-48b5-a546-fce42f81f136", "sighting_of_ref": "indicator--a0efcbba-6797-4fa4-97ba-69035455ae0f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee6a1d1-306c-4d81-b05d-d4f8fbc2f54d", "sighting_of_ref": "indicator--22da6639-a9d4-4641-9f71-aab7762a4fd2", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e03130-f182-421f-b72f-0f0fb7c5d4ec", "sighting_of_ref": "indicator--6d4aa0da-3036-4a8b-aed3-8509586502a1", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf46406-504f-4ef2-8380-39d3374e0429", "sighting_of_ref": "indicator--6d4aa0da-3036-4a8b-aed3-8509586502a1", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd8a6bc-7b14-4669-b60c-daf3206885ff", "sighting_of_ref": "indicator--6e5c51bc-4c82-48ee-9d05-aaa76f0b5473", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1a866b-b180-4ff9-847c-4d75cfd50cef", "sighting_of_ref": "indicator--f1c46464-9f23-4b84-8826-ed4df7cdf960", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ff6339-bc53-4485-8685-9d946c1022c1", "sighting_of_ref": "indicator--7758a3dd-28aa-4034-b744-4c20c1f4ef68", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760c6238-a4d6-43f0-8eea-8cbac4bb1353", "sighting_of_ref": "indicator--7758a3dd-28aa-4034-b744-4c20c1f4ef68", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2bc8505-bfec-46bd-b617-eafbb981012f", "sighting_of_ref": "indicator--772575be-7702-4cb8-b325-304ac4011666", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d191535-d186-4ffd-8988-318049370524", "sighting_of_ref": "indicator--772575be-7702-4cb8-b325-304ac4011666", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5b1335-2aaf-432b-aabe-cf924f9cb457", "sighting_of_ref": "indicator--e6e3f7f2-66f1-4664-9efd-83a0bc7e9233", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8c07eb-8379-4778-997e-7f99e0a0b004", "sighting_of_ref": "indicator--c2c11107-02ea-4a75-a1f0-fb3ecbd7f2b1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b32afc50-9226-466d-91bd-f309e10cbd7d", "sighting_of_ref": "indicator--920e8a14-783f-4342-99ac-9d1d7b6e1b57", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72995a05-77b1-4925-93a8-aecdfa10d969", "sighting_of_ref": "indicator--98b48820-748d-421f-a14b-9ce052897ea8", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b00c1651-7d2e-4b89-9d3d-2e19c08946e0", "sighting_of_ref": "indicator--98b48820-748d-421f-a14b-9ce052897ea8", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6458941-8b5b-4554-815d-924db03cf84d", "sighting_of_ref": "indicator--bf4d958a-e61e-47e5-b368-7e20d78a9989", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f7c2a6-388e-4b28-8f50-2f6988b15154", "sighting_of_ref": "indicator--bf4d958a-e61e-47e5-b368-7e20d78a9989", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73482779-3066-456e-bcb5-7899386640bc", "sighting_of_ref": "indicator--98bf9207-ceb3-45a9-bd45-584fe2547e6f", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886250b4-c144-43c1-9d69-862b846cfd0c", "sighting_of_ref": "indicator--98bf9207-ceb3-45a9-bd45-584fe2547e6f", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50704138-4607-44bd-862f-71f60c23917d", "sighting_of_ref": "indicator--674c9553-eccc-404b-bad2-69f9e90abcf4", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4755ef69-e565-47d8-856a-b97b88bf84ac", "sighting_of_ref": "indicator--3f0430cd-fc6c-445b-8cde-cf53315336a2", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e59ace-5a3e-4d2f-9f46-a0b1402161cf", "sighting_of_ref": "indicator--3f0430cd-fc6c-445b-8cde-cf53315336a2", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bfb3cdb-3011-4645-9673-7def8b5793fa", "sighting_of_ref": "indicator--73a43279-a357-4875-bfab-128af8dea84e", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--780dde00-90b9-4a32-9bb1-bce21d9850e1", "sighting_of_ref": "indicator--b18f29ae-4163-4f72-8282-d2d770e43fdb", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--090cf09c-6833-4c8c-815e-4375a68edc5e", "sighting_of_ref": "indicator--b18f29ae-4163-4f72-8282-d2d770e43fdb", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b410c0-b2f1-42dc-b0f0-14db30ff12dd", "sighting_of_ref": "indicator--b17497e4-e1e1-425e-a9c8-69b6176256bd", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bddb7977-8127-44c2-9b49-0cd82cf8c12e", "sighting_of_ref": "indicator--b17497e4-e1e1-425e-a9c8-69b6176256bd", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--504e248c-08a5-4067-aa1d-8d49a8ee2b4d", "sighting_of_ref": "indicator--f492c53b-f37d-4ecc-a253-45db1782be5a", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc019cf-b096-4c64-9ea3-a6b5e911dd4c", "sighting_of_ref": "indicator--f492c53b-f37d-4ecc-a253-45db1782be5a", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0876e739-ff1f-4615-a0ed-b8633ca870d8", "sighting_of_ref": "indicator--22c3a840-6fb9-443c-b04c-7c25a1a891b3", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ddd0713-1d56-4393-aadd-68663b4be140", "sighting_of_ref": "indicator--22c3a840-6fb9-443c-b04c-7c25a1a891b3", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02448f0a-d030-489c-b8b5-c566a9c73b60", "sighting_of_ref": "indicator--a0800d95-fd93-46a2-8a9d-41ab342df6cc", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03e5096-869d-47aa-92e8-c784a0c74b64", "sighting_of_ref": "indicator--a0800d95-fd93-46a2-8a9d-41ab342df6cc", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df8c76c3-aeae-472b-9a14-7634a1bb7f5e", "sighting_of_ref": "indicator--89b30e96-671d-4ca1-9986-efc55ca95b47", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07d6b65-f1fe-45de-84ee-cd8888ef68fd", "sighting_of_ref": "indicator--89b30e96-671d-4ca1-9986-efc55ca95b47", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd3077f-00b9-4c56-82d3-c77d4fafb860", "sighting_of_ref": "indicator--a996ab9c-eb91-475e-b007-a33cdf97438e", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f55325a6-e3de-4c05-9f76-9568b4cf39e1", "sighting_of_ref": "indicator--a996ab9c-eb91-475e-b007-a33cdf97438e", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fb0c1dd-80b0-4059-8092-68f380b94b1f", "sighting_of_ref": "indicator--276d67bd-2d50-499a-b68e-59f36059a8cb", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f26ab8-ccfe-4add-a054-47fbfe8b185e", "sighting_of_ref": "indicator--276d67bd-2d50-499a-b68e-59f36059a8cb", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb77b00-22a2-4d42-b30b-5eb182d7382a", "sighting_of_ref": "indicator--00f2ccc8-42bc-455e-83b4-cbde4af97282", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffed5556-7995-40f0-8257-454b8b20bf50", "sighting_of_ref": "indicator--00f2ccc8-42bc-455e-83b4-cbde4af97282", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c08e27b-098d-49cd-a142-ecdfd83a49df", "sighting_of_ref": "indicator--2d91752e-9960-4f40-a53b-431313425670", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d61f5c-be4f-4dc2-b08d-16871faf552a", "sighting_of_ref": "indicator--2d91752e-9960-4f40-a53b-431313425670", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d50a8820-33f4-445b-ae04-bc767dd69a94", "sighting_of_ref": "indicator--ce80f110-a9f5-46d4-be49-ddbff55754c6", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a9fb7c-53e8-484c-a462-3711f33918f9", "sighting_of_ref": "indicator--ce80f110-a9f5-46d4-be49-ddbff55754c6", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35edd8c7-5066-49cc-94ce-48999040f33d", "sighting_of_ref": "indicator--f192b27c-42b2-4627-bb98-9eba610023a6", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a328b9-2af8-4070-8f76-bdfaa6ad2f80", "sighting_of_ref": "indicator--f192b27c-42b2-4627-bb98-9eba610023a6", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e81de2-faf3-4f9e-9747-e2d646af52dc", "sighting_of_ref": "indicator--e5f000af-a062-4318-8c23-5337979c610a", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f7c210-f330-4cfd-8f3e-b8db6889b7ea", "sighting_of_ref": "indicator--e5f000af-a062-4318-8c23-5337979c610a", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df865e32-a7db-4325-b3f2-2b5fc760f49f", "sighting_of_ref": "indicator--0321bee2-2de8-4c13-86e4-f45e2b37c43d", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8320136e-8216-4662-9ea4-4b216ed00405", "sighting_of_ref": "indicator--0321bee2-2de8-4c13-86e4-f45e2b37c43d", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16a335d-6c01-4993-a44a-8bf89ee3da84", "sighting_of_ref": "indicator--e02b5482-fa87-4eb9-80c3-b8e4ae655d85", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8476423-e5f9-4e61-8bff-6db353618348", "sighting_of_ref": "indicator--e02b5482-fa87-4eb9-80c3-b8e4ae655d85", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18caff5-6bef-4bf7-983f-4295f6dd39c8", "sighting_of_ref": "indicator--0a53000e-0dfa-41b2-b012-62d97f13ea1b", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3ba59d-3c46-4cb3-a346-6aa430fa958f", "sighting_of_ref": "indicator--0a53000e-0dfa-41b2-b012-62d97f13ea1b", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf7b884-6e54-4c40-bb79-ba61df646d3c", "sighting_of_ref": "indicator--c60b7859-d3b0-4f60-91df-b08ca283669e", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479f4484-db11-4810-a558-af379d915e57", "sighting_of_ref": "indicator--c60b7859-d3b0-4f60-91df-b08ca283669e", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9779c9-da9c-4dba-a84f-a4e8830283bb", "sighting_of_ref": "indicator--f5b5223d-f176-4d40-9d22-689f699f6895", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53bd5ac3-84ad-45c3-9d5e-6418b1bb007c", "sighting_of_ref": "indicator--f5b5223d-f176-4d40-9d22-689f699f6895", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c96ca4e-0f05-41e6-b2ed-e486e8911067", "sighting_of_ref": "indicator--dd68b634-9c6b-442c-840a-13f5ce75502d", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c014381c-5cca-42be-8c26-ed1f5e540b1e", "sighting_of_ref": "indicator--dd68b634-9c6b-442c-840a-13f5ce75502d", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60250364-971c-48a1-94f1-c602d19f264a", "sighting_of_ref": "indicator--eb2bb9d7-7db3-4d4d-8a37-ed472732498f", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--383a4d4f-2c33-4edf-8bee-54834873c5e8", "sighting_of_ref": "indicator--eb2bb9d7-7db3-4d4d-8a37-ed472732498f", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a106840a-9c8b-4e06-9d35-2a93d3d3c1ec", "sighting_of_ref": "indicator--e309f292-2a62-4ccd-ac85-6d7f1594d2ac", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be689f90-8277-4cdc-8b4f-170b204e1e5c", "sighting_of_ref": "indicator--e309f292-2a62-4ccd-ac85-6d7f1594d2ac", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ebd9734-db74-4d76-a8ef-1ebafe4dc670", "sighting_of_ref": "indicator--6955ccb9-3523-45f9-bc3e-d408b46e03f9", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5bbb23-d7a0-4f9a-8c43-b53de01d4aa3", "sighting_of_ref": "indicator--6955ccb9-3523-45f9-bc3e-d408b46e03f9", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e386fcb-7607-4403-bdea-ee645213227d", "sighting_of_ref": "indicator--3954dd4c-cbe4-4220-9c6a-a5d7b8381d39", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--773e79b0-af67-4742-a7d9-ee3bd2a782d9", "sighting_of_ref": "indicator--3954dd4c-cbe4-4220-9c6a-a5d7b8381d39", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a5c6c82-52bd-4d0d-8d64-be4c55c946f0", "sighting_of_ref": "indicator--a8e9dfa5-9a32-4419-8559-175b4c719bc6", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd4acb87-cae9-4d9b-a5ba-145236e4f649", "sighting_of_ref": "indicator--a8e9dfa5-9a32-4419-8559-175b4c719bc6", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1272e13-3ab8-44cd-9aa5-8da7473037ec", "sighting_of_ref": "indicator--41854438-3ac2-4920-999b-f7532587b854", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd4dd920-7acc-4c56-8c50-85f484cf5e99", "sighting_of_ref": "indicator--41854438-3ac2-4920-999b-f7532587b854", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ba1d30-8ee0-4719-8017-4dfb88f0e084", "sighting_of_ref": "indicator--63106bb1-1f3f-4af3-9f4d-be43ac7015ba", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd24b243-9a68-4733-bdef-f228a8a4a9cd", "sighting_of_ref": "indicator--63106bb1-1f3f-4af3-9f4d-be43ac7015ba", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e35d1a5-69d1-4917-9160-b6e203e1d5fb", "sighting_of_ref": "indicator--5ed7807f-8082-49c6-91a3-a833b375a366", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c2792c7-8934-4083-a3a9-19669f0a63b9", "sighting_of_ref": "indicator--5ed7807f-8082-49c6-91a3-a833b375a366", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8054ace8-eb47-4f8e-8593-667290ef74d4", "sighting_of_ref": "indicator--162f7590-2136-4dfa-92da-f0b8b0a3089d", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a748abf-97c0-4dd3-9dfe-072f72216fbf", "sighting_of_ref": "indicator--08e7dc16-6fff-4ca9-acab-c8fc8969fcd7", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac4b0f2-30bb-4950-b262-7ca36092bfad", "sighting_of_ref": "indicator--08e7dc16-6fff-4ca9-acab-c8fc8969fcd7", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--874d147c-c5c4-469b-b5ec-fa0ca72b9981", "sighting_of_ref": "indicator--24857bb2-6644-4ac0-ba1e-fb156cbbe755", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e063f5-92e8-4bb5-b3d5-75030d4816f0", "sighting_of_ref": "indicator--63a9ba04-8cab-4aae-9533-087054a679e0", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1124d462-e96d-4607-b35f-b13089ce3c10", "sighting_of_ref": "indicator--63a9ba04-8cab-4aae-9533-087054a679e0", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8122a12-bc27-47e7-8f8c-7beafa29ea95", "sighting_of_ref": "indicator--9c62f5c7-0feb-413a-9ccf-db31d780fb66", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--692528e5-0cf6-4b85-940e-02e39699c46c", "sighting_of_ref": "indicator--fd6db611-4975-4bd8-aafc-4470a57c947c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be9c6ba-41fb-4ce0-8962-66cf79771f79", "sighting_of_ref": "indicator--06381732-b5cb-470e-aea6-58008b1f7ce4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--900a6f26-8ae1-467d-9432-a2cd6af750ce", "sighting_of_ref": "indicator--93eb02a1-e39f-4c3b-809b-adaaa9fc2d10", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b35903-c7ef-4926-846d-f33e0039daa9", "sighting_of_ref": "indicator--72f5a0dd-909d-46cf-bc79-fa33491e3425", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f9ab26-c9ab-4d00-9d5a-3787a47b916a", "sighting_of_ref": "indicator--3c8dfe40-6122-4f7b-9502-64684c8fb19a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3824fcda-5da7-41d6-b966-6535f32dbfa7", "sighting_of_ref": "indicator--2544260e-d552-43a6-baaa-d08a85e86933", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62937be-b913-467d-83a9-c55c73431090", "sighting_of_ref": "indicator--25ebbcdc-6172-48b5-916b-01d48d1446cc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b377bf9d-dc3a-4a74-9f71-9e50ba818e71", "sighting_of_ref": "indicator--adcb6b47-39f5-45fb-897f-2cac222fc562", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc246a8e-f0e0-4bd7-a397-f5bc5e581cb3", "sighting_of_ref": "indicator--ccc6b46b-2a20-4a00-9a1b-4359351861c1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e718c590-2612-4e81-b2f6-910ad8acb9d3", "sighting_of_ref": "indicator--a55a54c7-8e2a-4821-ba0c-544b9b35c595", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a2b0d3-563f-4fe3-ba92-529941de1c29", "sighting_of_ref": "indicator--0e21eb27-3b20-49bb-b3b6-04059ca53f79", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc3b22e-e7cd-4d0f-8d2d-7121f0405edc", "sighting_of_ref": "indicator--2c44dcda-81b8-41de-85c8-a7c0d81db0a5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace56703-3ebe-42f1-9b16-9900d68e2c1d", "sighting_of_ref": "indicator--e4c82f0d-1e38-4e22-a666-d3e77c3978a4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff3b0cc-8980-4514-bc5f-263df682da58", "sighting_of_ref": "indicator--160edd15-402a-48db-9139-e84d8e721e96", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70afea9c-218f-436b-aa7a-c1d1be05412b", "sighting_of_ref": "indicator--3422d6b6-e92b-4568-9a70-1069a4e628d4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--918b7386-93d3-4021-b91c-f1e5c9316542", "sighting_of_ref": "indicator--ce2675a0-f4a0-4a4f-817f-5a26f065604e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5059e76-8ee2-4e6b-9ffa-f24df1e3d2e3", "sighting_of_ref": "indicator--7035d896-3df3-4406-a954-466d9a1986e7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3668938-3a14-428b-b953-c88995d9bedd", "sighting_of_ref": "indicator--79a67a68-6631-4932-90fc-2162b73f173b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f7168d-2587-43d8-b66e-b38cf346111e", "sighting_of_ref": "indicator--d646fd44-6d94-4edc-b008-e21e9f1d4aa1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0928a7-e2e9-4c78-83e1-44c0a55959b0", "sighting_of_ref": "indicator--0b8a3698-0cac-486f-a9d9-2297594653ab", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c19aef0-063f-4c68-b2e9-3ec31f5d1989", "sighting_of_ref": "indicator--fd915320-b889-469f-9bad-2af8bfcbae27", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829f45d8-0b70-458d-b094-d3f3f256b917", "sighting_of_ref": "indicator--932529d7-cfbe-45c8-aac8-33ba106d4193", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc088ea-20b0-453c-88a0-059aef33548b", "sighting_of_ref": "indicator--95e31ec7-95bc-41ee-8fae-8b749efc0dcc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f7df57-650d-40f4-87a2-78bb0d9b1bc5", "sighting_of_ref": "indicator--bc449ce0-60e9-43b5-86fe-32f7f5fcdaec", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1713ec32-6376-4c6a-a43b-b638872542dd", "sighting_of_ref": "indicator--fe586fe6-fe26-4ad1-a1bb-0ab3da73ef66", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ca5521-bd87-478d-ba50-ca85d23aef50", "sighting_of_ref": "indicator--88f624eb-16c0-4c0a-b64f-e513995293ab", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14ddf26-cba7-4390-ac43-e76143302c6f", "sighting_of_ref": "indicator--47b3fa5c-d0a7-4349-9a80-f232dd70c8a9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00aa8e9-8e6b-4a18-ac9f-9d982d408a27", "sighting_of_ref": "indicator--f6a486a4-0b4c-476e-a355-c19db3d02bf1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638e52c5-8e97-44c9-85b8-e6bbee57933a", "sighting_of_ref": "indicator--c8bf1b7e-6161-49b1-a771-31969c80773a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0373048-61bc-476e-a26a-59a9fce49e5f", "sighting_of_ref": "indicator--0f64ad76-2cf6-4d2c-9c9f-70d785223f73", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--743219db-006e-4728-8dea-67a1228df9fa", "sighting_of_ref": "indicator--3d6853ca-77e7-4dc3-8f02-7cf8b860b96e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c8eb3b-31d8-4270-bc69-648dd1b92078", "sighting_of_ref": "indicator--9219f411-2381-4a09-8913-510f7b5747de", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301ede8e-c1a6-48ac-933d-d237d7b99f5f", "sighting_of_ref": "indicator--1ac83c53-242b-4896-bd4d-042d0742efc8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec9ecf3-3e9e-474c-8ff4-a1a20635fc4f", "sighting_of_ref": "indicator--9e1681d0-f02c-4f09-bbbb-3b4cc5de9c1a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3b8d50-97fa-464f-a3da-c43bbc6b8cef", "sighting_of_ref": "indicator--d1593ad3-810d-4110-8b76-2d86ebf4d824", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a81fef-3881-4987-ac6a-1f691daaa5ae", "sighting_of_ref": "indicator--29b0af20-852a-487f-95c0-d2b7e7d72107", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21b8c36-f700-4cdf-8a6f-bdc6b9578704", "sighting_of_ref": "indicator--e3c116aa-9f01-4424-bad9-0e6b8468ed49", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f51bb834-373a-4c08-9287-0e69cd1432cc", "sighting_of_ref": "indicator--f8c57d0e-77d2-4f9c-87b1-781ee7c5f75f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647e9f98-69bf-492f-88c4-38b7f8a16170", "sighting_of_ref": "indicator--882074cc-2579-440a-9200-6c7794056f14", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87268d05-4794-4019-9f18-ddc915f0cb01", "sighting_of_ref": "indicator--d4b24d43-de7e-4f29-862b-90b40c328432", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e932c00d-8a05-4ad5-9e19-13897958d04f", "sighting_of_ref": "indicator--dcfc64ed-e859-44cb-93f1-dc723bf0f6f4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a58b8d-9a5e-4dda-95dd-d2b341b7c2a9", "sighting_of_ref": "indicator--609bf924-ee89-4b7f-bca8-2f9af92d4410", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e033f4c-224a-477d-b5c0-626c24fdb1d0", "sighting_of_ref": "indicator--a155ae94-4b12-4ddb-8633-643982ee4780", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11faf0f0-c998-427e-a4ce-202817c63288", "sighting_of_ref": "indicator--2ea8bb1d-6f50-481a-bb8c-53bfccf463d6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d060be-1a51-4b3e-b601-ba356fb45828", "sighting_of_ref": "indicator--b2953421-82dc-44a2-b390-ef6edc1ca7f1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--644de2af-9df0-45d7-a122-b64733634a3a", "sighting_of_ref": "indicator--72503542-9873-47a6-bb4b-a092dc517813", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4edaedc-895c-4092-b465-c48568a63088", "sighting_of_ref": "indicator--3e18659a-cb6e-4eff-bca7-eadf3c873a86", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b3104a-1234-4ad4-a9fc-d9022ecccd7e", "sighting_of_ref": "indicator--ff645a08-1406-4084-9495-330cca664a86", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6537995-0e50-4891-beef-aa1accf3c5d0", "sighting_of_ref": "indicator--befc485d-4161-49c0-bdc5-17c19743b530", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3d361e7-603f-4553-a0b1-a2105d501b58", "sighting_of_ref": "indicator--6effed8f-f0f3-4c11-a37c-bf6406017aaf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f597bb38-8d07-408a-b7d9-3f02e93a13f3", "sighting_of_ref": "indicator--98911831-0b65-4cb4-98c3-dba1440701ed", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25abeef8-fd75-418c-bae6-f19bca30fbd0", "sighting_of_ref": "indicator--dd540e06-4fab-49e9-b439-b3bdd2674e61", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d6da1a-c594-4d72-b31e-4c52af862142", "sighting_of_ref": "indicator--a12e8dd2-d888-431e-9216-65559a7e784a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a77cdf38-06fc-45d0-901b-46d6b8dda200", "sighting_of_ref": "indicator--e2498d5a-996f-4eb8-b549-19d27e02528a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d578218-17c1-422d-b5c7-a738d442723a", "sighting_of_ref": "indicator--cd166f85-fdc6-4db4-b47c-b2c100ea103b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a944ece2-b553-4b55-90a8-fc1accdd92be", "sighting_of_ref": "indicator--eb9ff3a7-7ebb-4ec5-8e44-04de5b5c2115", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54d3c7e-68b5-4354-a1a9-b6eb5cee4468", "sighting_of_ref": "indicator--af67a87b-7979-425a-ac6d-8df58302e924", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1cd387b-f6d7-4006-be41-daa51b43d7a3", "sighting_of_ref": "indicator--8303c980-449d-4c4e-8a4f-c8604b4ba896", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3aa8844-1a97-4c05-9815-3ba2304ec61e", "sighting_of_ref": "indicator--908c65b8-f564-4ae8-9958-4e40976eb5bd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be27b889-4c2d-4c23-a648-da06d44641bc", "sighting_of_ref": "indicator--368296f1-05f9-4603-a4b6-7599107a4fcf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a80b48a9-323c-492a-b820-14aa4ca36dc5", "sighting_of_ref": "indicator--db8b9e24-56dd-4311-a6e1-8fadd36d4112", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e7c3f8-6c08-41b7-9bfc-7148a5f6198d", "sighting_of_ref": "indicator--6dcae72a-68f7-4161-a384-39dffbe50120", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50392778-6038-4398-b11e-557c78491974", "sighting_of_ref": "indicator--95000cb1-8c08-42fb-8efd-1ca26cca9b0d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef21dc7-75f2-484d-8864-d2f6bba435cd", "sighting_of_ref": "indicator--a9c301d0-7564-4ae1-a113-fbf56fecfdff", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58bf61a1-0dcf-45d0-a95a-e28b48a3904c", "sighting_of_ref": "indicator--cf0ca0a3-e4ff-4f22-886e-287a72b0ca19", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aefdcef-1755-4ef4-927b-886b1bb06ef0", "sighting_of_ref": "indicator--db43f3d3-44ce-4cdf-8a88-d8d32333dcc5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87f2431-44bc-4450-b2ab-8896346d20c9", "sighting_of_ref": "indicator--856b2fe5-23cd-47f5-b317-4ddc7c0d242d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4470a7d8-8ab5-4f28-a1a9-ee9746983aea", "sighting_of_ref": "indicator--9e2f2f08-9201-438a-be6c-d4136ed34a2a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95944169-4cfb-4553-9b16-f88a9d666748", "sighting_of_ref": "indicator--80d11854-49ec-4700-9b77-0714ef9d431f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8918f10-d220-42ac-8f93-59b68a9cc982", "sighting_of_ref": "indicator--0093cadf-d36d-4037-856f-d1175d76098c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f188d1b-2df9-4519-9202-0fd6866255db", "sighting_of_ref": "indicator--4fa9287b-c24c-40c9-afda-b1ee63942667", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0125f94-5114-48ca-88cf-a1ee3ff5514d", "sighting_of_ref": "indicator--010e375b-1afa-4838-ab28-42666104342b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce573d59-24fc-48f2-8259-0255047f9cde", "sighting_of_ref": "indicator--db4e62fc-a7c0-442c-ab6a-e6b76b9fab62", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9dbbe4-9033-434e-b934-e38889eebd76", "sighting_of_ref": "indicator--ab994038-874f-4ee2-96c4-3d6fbc776154", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2cf1b3f-5fc0-4117-ae64-1244a5d7d6f9", "sighting_of_ref": "indicator--d2dc798e-b28e-48c1-9e99-c0056694252a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d3af0e-2509-420c-aa87-d745b21acd9d", "sighting_of_ref": "indicator--4f794bc0-d2af-41d7-b422-b2536e7459a1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd28d70-4b45-4d4c-b481-e6a45c976fdb", "sighting_of_ref": "indicator--9b5870a6-e079-409f-b448-01cf147c10c3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1d8927-2b33-44d6-8069-009f7d3f83e7", "sighting_of_ref": "indicator--25b89772-586b-4c63-a30a-2107fad2c649", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ebc6d8a-0b31-496a-a72e-a4eae9f83377", "sighting_of_ref": "indicator--c42452a1-6edd-4558-bd8a-c3009dbb07df", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08746695-a7f4-4729-a280-9c56a794c2e9", "sighting_of_ref": "indicator--655221c1-f71e-4859-bec5-0c8d08cdf4cd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe96e71-7699-44d4-9e9d-47b781dc38d2", "sighting_of_ref": "indicator--5ae4c4a3-fc6b-4186-9eac-b075bbd6010a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ae99fc-3009-42f3-a447-fc4ede5a643b", "sighting_of_ref": "indicator--fe2738c6-aed0-48de-8091-c9a797c89a75", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcebcdc-843d-436d-9fc5-153fe38b65ea", "sighting_of_ref": "indicator--b6cda503-2324-40cf-9891-1b5632dddea9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--715227b1-9f59-4932-a0cb-be137008e285", "sighting_of_ref": "indicator--68bc0090-b260-4ea6-b1ad-7cccaaf856f0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25629a53-29de-425f-85ae-50a465778416", "sighting_of_ref": "indicator--3f1b3b29-aab8-4194-9d75-095413c880b4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6e24ff-6d64-4ca7-b600-9e7eb5d866fa", "sighting_of_ref": "indicator--b730cbad-430f-4d63-984a-6f8dafec3698", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3044976-32d5-464e-a396-3cfc5809c92f", "sighting_of_ref": "indicator--14b03069-15d1-4e37-b176-ea1421621f7e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0808177a-f018-4123-9d45-037ba4b82466", "sighting_of_ref": "indicator--62b3ab35-f190-4a34-91ee-6338ec9776a6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce88c87-50a3-4f1c-8dd3-fded6c5dca05", "sighting_of_ref": "indicator--66e3245c-b5f4-42fc-baf0-9b619774f03b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c46f84c-9929-41de-9016-2a7e274a8da1", "sighting_of_ref": "indicator--63a9870a-4213-4133-8dd9-520eda22735b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70216cc-4935-4a64-b981-437bab2cea2a", "sighting_of_ref": "indicator--f460fd96-afac-4b36-817b-9128116aef2e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d107a4c2-f430-41eb-9790-679c906f8f39", "sighting_of_ref": "indicator--e76bad73-60fb-410f-a8f3-efe15bb62e26", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6375dd9-8ade-4b00-a1eb-dbd3c7ab3d64", "sighting_of_ref": "indicator--bed575a2-6804-4bd1-9f81-0604d024f6cf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b2c759f-048c-475e-8170-fc97986421d8", "sighting_of_ref": "indicator--cd333383-d835-4e71-a3b7-b7607e565cbf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c0b1da-2283-45e9-a7d3-f24d1f7bc0e1", "sighting_of_ref": "indicator--bf3b7615-879f-4559-a3ea-b8e0630bca4c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcfc36b5-e46f-4b5f-9e8d-855568cf2a61", "sighting_of_ref": "indicator--296e3c9b-d53f-41d8-af0b-e84be0e159bc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe4449f-9052-49bb-89bb-9ce7a7c922de", "sighting_of_ref": "indicator--3f5c64ba-3fc8-4dd5-9eb8-b5d448b78b7e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b27b39f-aaa5-46c0-808f-438e500da90f", "sighting_of_ref": "indicator--46b9bcb2-debb-4ec3-ad1b-20db1975082a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba2bb52a-09f8-464c-af99-5b2327eeb1a8", "sighting_of_ref": "indicator--002d0fee-9d10-49d4-bbcf-6d2dd6666053", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba7ff1c3-815f-4b83-96b5-811f9e2d35cc", "sighting_of_ref": "indicator--623b6d96-971a-4593-ad31-1cd4bcdec758", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--098fe800-6e56-480f-ab22-2da020945a56", "sighting_of_ref": "indicator--2b2156e2-b674-4c62-9406-06de65d7b99d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e2ad162-f869-4270-a0ed-7c2c6b5d8b5e", "sighting_of_ref": "indicator--fcb56737-bf51-455d-b720-b6394ec9fde2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--435ddcec-943d-4cc9-ab91-f9eecccbeb87", "sighting_of_ref": "indicator--ad428069-df43-479e-880a-dc2d66c651a8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c1076de-8f2e-4c10-902b-e84209846f75", "sighting_of_ref": "indicator--f091f104-b421-4b94-9514-6f8d4dde95a8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f60298-b77c-4af9-a664-943f565f7f60", "sighting_of_ref": "indicator--0830ce1d-f773-44f0-b835-9ea557897d85", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e31ad95-73af-4d07-851b-88b357a57a2c", "sighting_of_ref": "indicator--05d1e987-15bd-4327-85ff-58dd9fddf149", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b58e7c9-0983-46ce-ab69-efa88bfe5312", "sighting_of_ref": "indicator--5b45250b-e172-4e68-8da8-93b05a0a9e7d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e338f1-bba5-4913-aa5d-e3d9d0d7dbb3", "sighting_of_ref": "indicator--d8ca1fa4-2888-4e2e-b566-e91ae1f3eb44", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45bde0bf-09b7-45be-9204-fd0fd8e4861d", "sighting_of_ref": "indicator--51050f0c-9ef8-47ff-b933-f2fc2a0703e0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e0b88d-5458-4a40-a6ae-f73f64643011", "sighting_of_ref": "indicator--b08771c2-287f-4881-adfa-6a1c5b3c5d40", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27eaaba0-379a-41f4-b405-4181b37e4f23", "sighting_of_ref": "indicator--29d955f1-12e1-4e4f-a2dd-0cd9268abf65", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df7732ad-0321-4263-8e53-5d7976f9a457", "sighting_of_ref": "indicator--29d955f1-12e1-4e4f-a2dd-0cd9268abf65", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306e7c9a-7c1a-471f-88b0-ba76d6ad8e49", "sighting_of_ref": "indicator--39ae6037-b000-4356-8288-bb70cc80758e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a993289-05e3-4b6a-b559-ac358916593f", "sighting_of_ref": "indicator--19d5d2a7-7374-4335-91dd-a69cbe1adc05", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3a1a41-d779-4c69-8e3a-67b680b3c633", "sighting_of_ref": "indicator--9a56be7d-111c-4de5-8549-cdb20411b90d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef2b89f-7665-4113-8fb7-ef018b9dc800", "sighting_of_ref": "indicator--52519385-8863-4caf-b76b-71facfa2f94c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c14f5ae-fcf2-4ede-9b6e-ed3a4444f992", "sighting_of_ref": "indicator--c3bc9a5f-d62b-4835-b5e9-b42bc1860fe7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efc4c025-de4c-45ec-bcd0-f415b5789805", "sighting_of_ref": "indicator--9079b545-634d-4814-939e-e46542585f45", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830ec1b4-7005-4298-99ae-465124154991", "sighting_of_ref": "indicator--e6482a41-c755-4948-96bf-d6000dfe70d6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ddac50-3381-4047-8b1d-76180f81d77d", "sighting_of_ref": "indicator--e71fcd4d-d307-48c1-a61c-16df7994bf33", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee60ae2-4541-45dc-8461-2b941bbe7a3a", "sighting_of_ref": "indicator--7a4dd490-a41f-4eaa-9b07-1887b02832a6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37211880-f9a8-49ff-aefb-8ab6457544ec", "sighting_of_ref": "indicator--f14420ff-d2a5-42d7-aba2-91381378ca11", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074afc8f-8074-4629-bc7f-4ca98e9bd0d2", "sighting_of_ref": "indicator--655ba9b0-8353-4ff9-8849-409095d27356", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e54392f9-6199-4330-86b1-b6bdb6051820", "sighting_of_ref": "indicator--ef949239-d99c-4317-918c-10f9fd38ea2c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f879fa56-2e63-4cd6-8ec8-c27cdb816057", "sighting_of_ref": "indicator--8ffe74d9-9107-4068-b36a-b9cc910a34b8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2752f26d-669c-476d-8453-1961971cef4d", "sighting_of_ref": "indicator--0741491e-7765-401c-811a-7d40f8a00da9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba1c40cd-9bf1-44f5-8f91-09a121d75e1b", "sighting_of_ref": "indicator--9f64d9e3-a1d0-4332-8881-ff5aec5349e6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a5b545c-1930-4e57-8fc5-50e710eb8aa1", "sighting_of_ref": "indicator--cc45811b-3eda-4562-a8eb-1eaaf6c38e5e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a98edb-1ad2-45bf-8bf1-4044189cc509", "sighting_of_ref": "indicator--6e39c949-be39-4df5-9552-83337bee56d1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796f2390-fa7f-4ec8-a459-b8ad18b98676", "sighting_of_ref": "indicator--6e0266c8-916f-4232-ad77-56c9def6153b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aacc9a82-82eb-4937-b0a5-af9262817bb8", "sighting_of_ref": "indicator--fe922418-6aff-4c4a-a062-2d15137330b5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--445eb1cc-ea4e-4637-860b-8f0e5927ca84", "sighting_of_ref": "indicator--c40be5ac-af24-4cfe-b266-29d33ba2ef8b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e170286e-ed35-432a-a9e5-d4d1784c5aa8", "sighting_of_ref": "indicator--041ae0ae-fcf5-4fa3-8fdb-9005ddcc7063", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7188edbe-8bef-4058-be91-cf6c8374b2e3", "sighting_of_ref": "indicator--e40c7e94-3be6-4688-85d4-2dafe13a3114", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bda5deb-6b14-41b3-90af-59271cccc427", "sighting_of_ref": "indicator--85eed6ce-e534-455f-9222-76a12b0254cd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c524aca-6867-4d68-b04e-1525fff6920e", "sighting_of_ref": "indicator--054dc966-f7f5-4ff8-aa3c-20f94ed03a40", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c01f22fe-fafe-4c88-b6e1-b3d7955564dd", "sighting_of_ref": "indicator--fa2d6c2c-78cd-417f-8e41-598538a8ed19", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ba2435-3f55-40bb-bc30-f5e17722237b", "sighting_of_ref": "indicator--5a5a50c4-6183-46de-9dfc-4fd6cb604fbc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4a7341-6613-4fa1-8992-93215ce2a722", "sighting_of_ref": "indicator--3ec16ef8-2b56-4fdb-9c52-4f5e68613304", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549a086d-f7a9-4ea0-989e-12e05b68f857", "sighting_of_ref": "indicator--e0789b55-67ec-4834-b45d-2c61b96bcbbc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71fe662-b539-463d-9118-918425edd3cf", "sighting_of_ref": "indicator--b0d4d153-e076-48a3-88e6-3990f28b277a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6811838-57ca-4695-8ed7-bf00c9ebcd94", "sighting_of_ref": "indicator--159d2e7a-a751-45e2-9ec8-fc4608742083", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4f7c5e-9937-4689-990d-afdc36489d42", "sighting_of_ref": "indicator--e2d21c21-2826-49e7-a567-63ca7af86140", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f275faed-8aaa-4cf9-8ab0-dd5717828fa3", "sighting_of_ref": "indicator--8699d853-0bf1-41f3-ba07-1b0fd0f7f3ce", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ed07de-42fc-4fc1-bf84-c2a58de86ec3", "sighting_of_ref": "indicator--1007fb7e-ee76-417b-8731-7503fcdb5096", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb4bef9-fa82-4b6b-854e-ad02af2e9bab", "sighting_of_ref": "indicator--880a714e-987e-44db-a9b6-6bb96e9164fc", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c40ec7-af32-41dc-b408-0323b6a24385", "sighting_of_ref": "indicator--880a714e-987e-44db-a9b6-6bb96e9164fc", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74cfaadf-14ef-49a8-a129-e3ff7cc8367a", "sighting_of_ref": "indicator--7c539f40-4489-425c-bb6c-f28a3c7a4f4b", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6692faa4-e472-4c10-b5f3-a2dfc7a1a3f7", "sighting_of_ref": "indicator--7c539f40-4489-425c-bb6c-f28a3c7a4f4b", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--016bd3bc-d572-4e9c-857f-e3b77271b1e5", "sighting_of_ref": "indicator--59760580-32ef-4b3a-aae1-5306a90604d8", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878575a2-f454-4107-bea2-7f949b723bed", "sighting_of_ref": "indicator--59760580-32ef-4b3a-aae1-5306a90604d8", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e4b9f5-a53f-4ee4-a867-365206e88016", "sighting_of_ref": "indicator--eef61239-b22b-4350-bf27-08fa27590f89", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cef90db-6a67-4cb3-befe-a9ecb3ed50bc", "sighting_of_ref": "indicator--eef61239-b22b-4350-bf27-08fa27590f89", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6b29c7-cf30-46e3-9ea6-a13dd6c5160d", "sighting_of_ref": "indicator--61857f87-22f4-4fea-a13f-c817582d98ec", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d1cdeb-26d8-4e08-aac9-c32f7dbfc979", "sighting_of_ref": "indicator--61857f87-22f4-4fea-a13f-c817582d98ec", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f645ea3c-0e48-48a5-9009-204fa20514c6", "sighting_of_ref": "indicator--c865caf6-6e21-4441-aac4-a7d026927c9a", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--833c5b4e-d754-46e4-9dd5-e2428db628cc", "sighting_of_ref": "indicator--c865caf6-6e21-4441-aac4-a7d026927c9a", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad159453-bca6-4340-8b30-5e2fe4ea2ead", "sighting_of_ref": "indicator--3b648585-6782-459b-8832-e56bb0e61626", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ade3272-672a-43f9-bc44-2b784843abc4", "sighting_of_ref": "indicator--3b648585-6782-459b-8832-e56bb0e61626", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16c7f6a-6615-4e9d-9756-af2096cc0832", "sighting_of_ref": "indicator--4b9625c1-e8bb-4e9d-b3ca-3753a7241ca0", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559f234f-a084-413e-aa4e-2cd50a794516", "sighting_of_ref": "indicator--4b9625c1-e8bb-4e9d-b3ca-3753a7241ca0", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94201023-5eb0-4b8d-bb28-38639670bc07", "sighting_of_ref": "indicator--6adf45a2-435b-433a-be0c-970d74fa8af6", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29b052f-fa7b-44df-b2c5-ce997bc73c40", "sighting_of_ref": "indicator--6adf45a2-435b-433a-be0c-970d74fa8af6", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f9875f9-801a-4376-b16a-f0fa5c6c024a", "sighting_of_ref": "indicator--6de83520-adc3-49b2-958f-5a78caf18984", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd4dbf5a-274b-48cf-a023-7c8418f1d69e", "sighting_of_ref": "indicator--6de83520-adc3-49b2-958f-5a78caf18984", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da96fb17-2c03-43cc-8db1-9fccfd2391c0", "sighting_of_ref": "indicator--ea226b31-48be-4ab7-b3ec-950a5532b55f", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--624c5b68-b1d3-453d-b129-ecce77977abf", "sighting_of_ref": "indicator--ea226b31-48be-4ab7-b3ec-950a5532b55f", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598b9ff8-f910-44b9-b6c8-05a1db0e725f", "sighting_of_ref": "indicator--d61e8c5b-7c7b-44f9-aa64-76c9e1d886a7", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f43294c-dacd-4b60-862a-2ab17386151d", "sighting_of_ref": "indicator--d61e8c5b-7c7b-44f9-aa64-76c9e1d886a7", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d95e23e2-c846-45ee-8934-b7da71bf74f7", "sighting_of_ref": "indicator--095f6b9f-5df3-400a-b4f6-d573136f8ab2", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b65437-5f40-4b96-b5c7-5c19d2790d46", "sighting_of_ref": "indicator--095f6b9f-5df3-400a-b4f6-d573136f8ab2", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e838ee-6768-4c7f-a694-ea21b82e2abf", "sighting_of_ref": "indicator--4ad9924e-ef83-4f03-994b-a0ea3b621707", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb3f972-d70c-4d66-bc40-dbe40d6837eb", "sighting_of_ref": "indicator--4ad9924e-ef83-4f03-994b-a0ea3b621707", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73329c22-502b-4d1d-9624-4e8af7813b5b", "sighting_of_ref": "indicator--6e087618-c1eb-4afc-a2c5-192ca6f3c656", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90551f0d-29da-459d-b46d-d57031983461", "sighting_of_ref": "indicator--6e087618-c1eb-4afc-a2c5-192ca6f3c656", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d091282-cd2f-45cc-bbfb-36b8b46cf820", "sighting_of_ref": "indicator--cca47389-3bd6-4f91-907b-92e9ba65064d", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c06ce32-dbbb-4284-b776-aa96613a91c9", "sighting_of_ref": "indicator--cca47389-3bd6-4f91-907b-92e9ba65064d", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ccccc91-670a-4ce1-8216-c7bbaa6da58f", "sighting_of_ref": "indicator--26795663-3090-4f51-af83-99693a434e0b", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96bf8076-c4e0-4f53-a39e-85aea6f05db2", "sighting_of_ref": "indicator--26795663-3090-4f51-af83-99693a434e0b", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59821523-3c15-4ae8-a3a2-b8e912d23a7a", "sighting_of_ref": "indicator--6bdb9629-024e-4ec1-ae76-661fd8de42e8", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5395b531-9b1a-4b5c-8525-73acabbf3ca0", "sighting_of_ref": "indicator--6bdb9629-024e-4ec1-ae76-661fd8de42e8", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203a781a-1f95-44a6-a06a-4defb25f9d73", "sighting_of_ref": "indicator--308ede30-2786-4391-ada1-62e29f3b267b", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf42702-82ba-4f2c-bd2f-2756f39a09af", "sighting_of_ref": "indicator--308ede30-2786-4391-ada1-62e29f3b267b", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--249445a9-4fd9-440c-97ad-ba5964d9e88b", "sighting_of_ref": "indicator--6d3b7ac9-3d7f-41df-92ba-4cb85871b8d4", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d117adc9-ad65-41a4-8bff-8f2c6d1468fc", "sighting_of_ref": "indicator--6d3b7ac9-3d7f-41df-92ba-4cb85871b8d4", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8aedb4a-d8d4-43ab-a4b9-e9c36c1ad9ad", "sighting_of_ref": "indicator--25e3c746-417d-4d77-833d-1f1c745bb316", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bebe63d-7b47-432f-96a5-0e6ec1949e71", "sighting_of_ref": "indicator--25e3c746-417d-4d77-833d-1f1c745bb316", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05f4461-892e-40e4-b0fa-70dfe4c8b54e", "sighting_of_ref": "indicator--dc7c6df5-44c4-4330-8aa9-0900809494c1", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8af477d-39d7-41cf-9b1b-c59a98603161", "sighting_of_ref": "indicator--4b86281f-52d7-4184-be57-515a817fe7ac", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3dc2ab-5381-4d07-bc56-f0adb1c8ed5f", "sighting_of_ref": "indicator--4b86281f-52d7-4184-be57-515a817fe7ac", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c18b80-ba90-41d1-a80d-32cd78adcc86", "sighting_of_ref": "indicator--ee66952e-4773-49ce-b807-996c78ebc80b", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0591e322-edfb-4271-bf10-442ca97690b8", "sighting_of_ref": "indicator--ee66952e-4773-49ce-b807-996c78ebc80b", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0344736f-8940-4c37-a05a-8aa37d26856f", "sighting_of_ref": "indicator--c2c75186-2575-4a44-b9db-a961b873b914", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98cb6311-094d-41ba-a404-edd3fdedf427", "sighting_of_ref": "indicator--c2c75186-2575-4a44-b9db-a961b873b914", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b8821c1-30eb-428c-bc94-d5d1fb45a896", "sighting_of_ref": "indicator--d6a6acb7-5d1e-4f50-a4ec-202007299592", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b24916f7-767d-4169-a96a-fdf0b41cb325", "sighting_of_ref": "indicator--d6a6acb7-5d1e-4f50-a4ec-202007299592", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb539b8-e99f-480d-8791-ae4fe7f42e1b", "sighting_of_ref": "indicator--399ae5d2-1b50-4dfa-bb0c-37eb4498a825", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a2911e-0841-4724-ab75-b5df57e00b35", "sighting_of_ref": "indicator--399ae5d2-1b50-4dfa-bb0c-37eb4498a825", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba5a8a0-713e-4c1c-b60d-4b398c24fb4a", "sighting_of_ref": "indicator--328bfea0-5890-4506-8382-0e509b96f78c", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c051e055-085c-44d4-b8ed-96837c690036", "sighting_of_ref": "indicator--328bfea0-5890-4506-8382-0e509b96f78c", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3bd514-92c7-4de1-a60c-e5cd5d4de690", "sighting_of_ref": "indicator--ab667492-57f7-4043-8958-4c2b49e24110", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71cc598-064e-49c2-a528-6a870fa557a0", "sighting_of_ref": "indicator--ab667492-57f7-4043-8958-4c2b49e24110", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9e9370a-1df9-47e0-8100-01c2505ca076", "sighting_of_ref": "indicator--ece31b0d-8423-47e1-a9a7-6ccec1599d42", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--477c5008-506e-4102-b277-b8157988af68", "sighting_of_ref": "indicator--ece31b0d-8423-47e1-a9a7-6ccec1599d42", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517ff243-7e1a-4409-9337-59df622826ee", "sighting_of_ref": "indicator--7cfa4f83-9bb2-44bc-9c14-5c83379c4e41", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--324041ac-f2d9-4def-8e72-368d219ffa3b", "sighting_of_ref": "indicator--7cfa4f83-9bb2-44bc-9c14-5c83379c4e41", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff4adb1-5326-4aa7-a6ee-335a739f49e5", "sighting_of_ref": "indicator--4d687f22-801d-4e43-bd9b-27471b7bba6a", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8813dac4-330f-4e02-aca9-c66b23fe64c6", "sighting_of_ref": "indicator--4d687f22-801d-4e43-bd9b-27471b7bba6a", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5edfb598-82e7-4aa1-9ef4-f84a6b99952e", "sighting_of_ref": "indicator--b10cf0e4-f393-4e96-a4ae-39a95f8c018d", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a986cb4-302d-4577-95b9-2475a5174d76", "sighting_of_ref": "indicator--b10cf0e4-f393-4e96-a4ae-39a95f8c018d", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af2de2a-5f8e-4926-8131-5f0fd58a315e", "sighting_of_ref": "indicator--cac5fccc-975e-42b2-9bba-ed9df2b206d0", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f3c0d91-485c-46df-8b7b-d874c0966bd9", "sighting_of_ref": "indicator--cac5fccc-975e-42b2-9bba-ed9df2b206d0", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d70e46b5-5579-4f60-ac5f-3ef29bb1db48", "sighting_of_ref": "indicator--cf51d612-ba5e-449e-b489-90af72a37bbf", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ea1e21-9d04-4beb-970e-d0c473308336", "sighting_of_ref": "indicator--cf51d612-ba5e-449e-b489-90af72a37bbf", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67cf567e-0018-4c02-93d9-d2a6c731efc8", "sighting_of_ref": "indicator--ef5d6dce-7347-450d-bd2d-f072234dcbcd", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--345dc45c-d306-4b44-b832-6cc7c0c4f48e", "sighting_of_ref": "indicator--ef5d6dce-7347-450d-bd2d-f072234dcbcd", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11db168c-63f4-47c1-b511-0d40de525d37", "sighting_of_ref": "indicator--a8723332-1dce-48bf-ad93-821530aa4339", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bfad444-3d5b-4a4e-b334-a01d7c891612", "sighting_of_ref": "indicator--a8723332-1dce-48bf-ad93-821530aa4339", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6606b43-b72d-43cb-b2af-de215de8e4d5", "sighting_of_ref": "indicator--59b851d0-5be8-4c3c-a9da-21d3cdddabc0", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c33a54-723d-4544-9c42-eed02f107a86", "sighting_of_ref": "indicator--59b851d0-5be8-4c3c-a9da-21d3cdddabc0", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c778a69-cea4-4e4c-bd7f-e20cda7fcb1b", "sighting_of_ref": "indicator--3800399d-01ab-4c5c-999f-43abbc6def41", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ad50a4-4d8d-4355-9c38-ec3cfff54883", "sighting_of_ref": "indicator--3800399d-01ab-4c5c-999f-43abbc6def41", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d108921-1c1f-40d2-baac-e2d65f155f62", "sighting_of_ref": "indicator--c6fe71af-a467-4306-af51-9346bc85c340", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58fe8372-13b5-4e90-87b5-46e280e3afee", "sighting_of_ref": "indicator--c6fe71af-a467-4306-af51-9346bc85c340", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe5d577-c637-495f-829e-2f8f36c57d1a", "sighting_of_ref": "indicator--7487fda4-25d1-40e3-a6e0-96b66d000075", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1865e39d-1eee-4b98-bb6c-649fbeec2275", "sighting_of_ref": "indicator--7487fda4-25d1-40e3-a6e0-96b66d000075", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f0ae30-4160-40e8-ae69-fee320c273b3", "sighting_of_ref": "indicator--102b2836-ec91-4d6d-acc9-36bfd6f4ccc6", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a36f05d3-0bb7-43e7-a0d8-56e63482334b", "sighting_of_ref": "indicator--102b2836-ec91-4d6d-acc9-36bfd6f4ccc6", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad6ac60d-d444-44c2-a43c-d13bdf859516", "sighting_of_ref": "indicator--af62bbd6-886c-4d38-b314-0a6ad35b4f26", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b920fd5b-4bfc-4154-957d-a981a528e4e3", "sighting_of_ref": "indicator--af62bbd6-886c-4d38-b314-0a6ad35b4f26", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422566a0-e288-4e55-8e3a-39760ac71537", "sighting_of_ref": "indicator--2e0a4b39-fc49-42f7-a73d-a9c724af0f29", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1310630-dc66-4341-aca4-707410279b8d", "sighting_of_ref": "indicator--2e0a4b39-fc49-42f7-a73d-a9c724af0f29", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905e94f2-cb90-4002-9f63-b5645b4d317d", "sighting_of_ref": "indicator--848f1e1f-bcef-47ba-9a41-7c283c042595", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14160a1-58e8-4396-8d95-b202749b6e51", "sighting_of_ref": "indicator--848f1e1f-bcef-47ba-9a41-7c283c042595", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--435cbac8-11eb-46d8-8fe2-3cc19dbe94c2", "sighting_of_ref": "indicator--11fe367b-7030-48ce-ae21-4c752d5f92c7", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2e144e-d3d5-4831-843a-23e0831bf697", "sighting_of_ref": "indicator--11fe367b-7030-48ce-ae21-4c752d5f92c7", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e1f15ec-237a-4ad4-b1a5-addeda0b77a4", "sighting_of_ref": "indicator--8fdd4b83-0d4f-4a83-a96e-3decf7f4f079", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f642377d-ef5a-4f75-b78c-3e43cbdc189e", "sighting_of_ref": "indicator--8fdd4b83-0d4f-4a83-a96e-3decf7f4f079", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30203bc-7b2d-4ce5-af97-5b48fe3b2a79", "sighting_of_ref": "indicator--59fb23bd-3b7d-4dc7-8717-ec03aaf06858", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709b98db-a415-4ce2-bfb8-0063562bbb38", "sighting_of_ref": "indicator--59fb23bd-3b7d-4dc7-8717-ec03aaf06858", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e071ee0-c1d4-4cdc-9cd6-6fb3f9efb710", "sighting_of_ref": "indicator--908060f7-c251-4d05-a62e-7ac3ef3035a9", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66885b80-ecdf-4ee4-8c8a-5b2f623d65b7", "sighting_of_ref": "indicator--908060f7-c251-4d05-a62e-7ac3ef3035a9", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa6a284-0309-403c-8860-046f26b5ee12", "sighting_of_ref": "indicator--3a9a8f54-c60d-412f-a18b-d01767126cfc", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4608d4-438b-4752-abe2-7dc86fd8dc70", "sighting_of_ref": "indicator--3a9a8f54-c60d-412f-a18b-d01767126cfc", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11804f9-955a-4719-8ba5-d8c6f1e3da64", "sighting_of_ref": "indicator--fa27d754-70e5-46e5-9f2e-daf046842dcb", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--238b8a5b-f4f3-4c2c-95a3-0d10630fd301", "sighting_of_ref": "indicator--fa27d754-70e5-46e5-9f2e-daf046842dcb", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e55f9a-a1f7-4e28-a2ab-f3dc3fd07ba5", "sighting_of_ref": "indicator--c58b2eb2-4d9f-459e-a6c9-e32143cd8458", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21a6b4b-609b-4325-9aaf-74c65df6a8f2", "sighting_of_ref": "indicator--c58b2eb2-4d9f-459e-a6c9-e32143cd8458", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--936dce87-da09-4550-8aee-01aef620d253", "sighting_of_ref": "indicator--968d371b-121a-431b-8bc5-fb189089e756", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--371ba4c5-3d67-4512-98af-98ef7e19bcc8", "sighting_of_ref": "indicator--968d371b-121a-431b-8bc5-fb189089e756", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--704057a8-07c7-4eae-9124-90c8ba996f83", "sighting_of_ref": "indicator--20e0a2c2-b119-41b3-8f3d-1ad8a49c26a8", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3792f9b1-1197-405b-b6bf-5baa26e2f4d8", "sighting_of_ref": "indicator--20e0a2c2-b119-41b3-8f3d-1ad8a49c26a8", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b62fccd-f00d-40d0-8b64-e556e4469f55", "sighting_of_ref": "indicator--92b46369-b973-4efc-930f-8dc6c86450c7", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da687670-4a5b-499e-baaa-655e35b7895e", "sighting_of_ref": "indicator--92b46369-b973-4efc-930f-8dc6c86450c7", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba5fe511-0a0c-40a7-85f6-55e5116dac6a", "sighting_of_ref": "indicator--de00b0c2-ad39-485d-a280-18a8644b4948", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f173900-64a0-41bb-ab7c-3526ab0eda9e", "sighting_of_ref": "indicator--ffece23a-5de7-45fb-b7b4-a40554800157", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4178b878-2a49-4794-b15a-192137d98bd7", "sighting_of_ref": "indicator--9a9f82ee-56ce-44cc-902d-4817150b544b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed07b84-cecd-44e1-927b-3ff94ff49361", "sighting_of_ref": "indicator--bc443797-b87d-4bed-b175-17baeae824a0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee580004-7c38-4e1a-a7e7-352035182ae4", "sighting_of_ref": "indicator--e5e33882-96ff-4516-add5-105959e6e781", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1bacaa9-578a-45f0-ad4f-93f3dc129da5", "sighting_of_ref": "indicator--2300fbe6-25d2-4071-b87e-5b71ac598a46", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e43d901-3731-40e1-b057-882611eca430", "sighting_of_ref": "indicator--7eed9ba5-fb52-4c3f-992b-81ef9f642560", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7e7749-a9a6-4782-a413-1198a156c7d3", "sighting_of_ref": "indicator--03749973-878a-4bcc-88c3-9aaa869a6137", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e841f359-c3cd-4228-9c75-0c632f533175", "sighting_of_ref": "indicator--49d0f54f-907c-43b1-96a8-4b685f48c514", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d589a72d-d608-4b1c-9e2b-e0d8690066ae", "sighting_of_ref": "indicator--fa829008-e385-4982-9dda-d8f847dc11f8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc475ae0-3923-4686-aa5e-b7c58cb67fe3", "sighting_of_ref": "indicator--bd0016db-2635-44b1-a1d2-423bcd4874ba", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91dae57a-d20c-4a7d-bdae-cac565e3a505", "sighting_of_ref": "indicator--5b0a088d-c88b-4ea0-9d49-987b8f81ab7a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0fa8ad7-1319-4bd9-a038-4fa95d68d390", "sighting_of_ref": "indicator--ec509ebe-86d5-4229-ac2d-6867084ac505", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d962ed4-33c8-47a5-8aa2-1c2b8a087c38", "sighting_of_ref": "indicator--07f6de71-8a87-40a4-ad7d-d2dbc49280b3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4260b73f-1e5e-498f-b1c3-6049c8b8bbb5", "sighting_of_ref": "indicator--839c3354-4959-4764-9d47-ed299d427985", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695e9df4-8b4c-4711-a587-575f8606a05a", "sighting_of_ref": "indicator--ff113c23-d22d-4c2a-9eb8-8760f175f846", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef845574-1b1d-4cb1-ba5f-418969868cf1", "sighting_of_ref": "indicator--159b440d-a7f2-414f-90cc-aec8f770f7d5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--474951f6-2ebe-4925-972f-5532c5a6b953", "sighting_of_ref": "indicator--7614a8ad-564a-45d8-a800-282be60e2ba7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56dd3de8-1320-4bdd-88e2-2d80ada11d3e", "sighting_of_ref": "indicator--5eaaeaa6-afe6-47b5-9a8e-5a271d13f53d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04231a7-d25b-4bdd-be17-b34a644fc357", "sighting_of_ref": "indicator--67395574-37cd-47ff-93b5-14c0e85f7467", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22afc05-c76c-4a69-81b7-ed70eeeb57ae", "sighting_of_ref": "indicator--2bdde706-865e-4520-a5d6-b41fd3791181", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f43b1e-3fec-42d9-801b-89df5c1b39ea", "sighting_of_ref": "indicator--4e1c25f3-91ea-4da9-9bef-c077e0951cde", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbceb9aa-2f47-4071-a77c-b43e07b97540", "sighting_of_ref": "indicator--975168b2-543a-42ba-8248-edffdb9ae3e5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fdd810-bdfc-4af1-9f8a-b8dfbba99851", "sighting_of_ref": "indicator--fac04910-0652-4ca5-b0e2-8cf6e41c949e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cdd1da3-566f-4757-b5c4-7bd5bbfce11d", "sighting_of_ref": "indicator--a1367579-3db9-4317-b32c-0f81e5a57c59", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88397aa3-041c-47ec-a927-75f3e69ad0b4", "sighting_of_ref": "indicator--f01e8363-efb7-4b11-8156-2184b419455b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c987d55c-99a5-4248-87d1-22828360fab6", "sighting_of_ref": "indicator--a19bc58e-a95a-401c-864f-88cd47aa8892", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3099f3-9714-4357-b672-27a4042face8", "sighting_of_ref": "indicator--46365a7e-aa3c-446c-b0d3-1503da660677", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8586e11a-0172-4707-8a68-aa648417a0af", "sighting_of_ref": "indicator--f10b5746-9d34-4c4f-90ba-23590f0eb510", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f90e75-666f-4c0f-bd48-f96c0fd1db46", "sighting_of_ref": "indicator--916a1db6-b1cb-40f3-99b8-c1c0804c1cfe", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d3d36c-d137-4f7c-ba36-27ad37d5ee12", "sighting_of_ref": "indicator--f66f6f1c-3ca7-4b4e-a812-14f6457c120d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609c15ac-a8d2-44ed-97cf-5fd931d24384", "sighting_of_ref": "indicator--73eb7d0b-81e2-4f6b-a9a1-c95724ff8ac2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a222f826-e59b-4fcf-a6b4-03f0f61ef762", "sighting_of_ref": "indicator--bdc4d4d7-73d9-42d5-b15d-9772e427ad48", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d64758-d3fd-4c3e-9a82-e61db22873ac", "sighting_of_ref": "indicator--05eccfe4-a45b-46a5-8dc5-dfeb01927d58", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a99168b-323b-4d93-9b9e-7289127fc1c0", "sighting_of_ref": "indicator--b42b92db-c173-4310-86be-356bd4815502", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e435c4-fa34-4771-9a80-93b75e159343", "sighting_of_ref": "indicator--04bce200-14ed-4cfb-82ea-c7e1dfaefd2b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd4d964c-aa70-4ede-a978-705119f233e2", "sighting_of_ref": "indicator--8f6f6cac-d782-491a-8e72-c1217be04ea1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30dc14f4-fe18-4c18-99fd-474e62e73ac1", "sighting_of_ref": "indicator--02620b98-0e60-47f7-83d4-9f01375209fd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35020e9b-3ed1-4ee2-8a08-a5cdcc0a5953", "sighting_of_ref": "indicator--df362790-d9fe-4260-b717-409987ad7cad", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5573915-6010-4d89-8968-95365f8262b7", "sighting_of_ref": "indicator--21b77303-d87d-438b-99ef-00a9dafa0511", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3718db48-6fcf-4075-94dc-ecac96150081", "sighting_of_ref": "indicator--d6002b0b-2171-463b-99f7-ffaf15eecd44", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567d5c01-d168-4651-b793-6ca12d09df81", "sighting_of_ref": "indicator--c3eeb0c5-bbdb-4594-8db6-3ce71555b40e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f9f352-c917-4c7c-a93e-2a433d0b3fd0", "sighting_of_ref": "indicator--1c847c91-1f3a-4d6f-8082-861ffdfee8d6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5fff716-bfd4-43e4-851e-4fa68f7b2011", "sighting_of_ref": "indicator--d963e0d9-756c-4953-a0ad-4ba9bea88ee0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a057efb-3a93-4ce5-9fcd-0f13ff303a0a", "sighting_of_ref": "indicator--abd1ea05-5c05-4354-94d3-c8d1956589af", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4486b825-f956-42b7-b9dc-6b8aa79c7222", "sighting_of_ref": "indicator--e7147975-d30c-42c2-8e81-c40bd1038e86", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70406497-e6f0-41dd-afac-cb7de59d476a", "sighting_of_ref": "indicator--52805b0c-1647-443d-92ec-d10506ead7fa", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4c0a23-b37d-4fc9-bf94-79c6fc0933b5", "sighting_of_ref": "indicator--69b17041-6574-4795-933f-c84466ff74d9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8778ffcd-e0d9-43bd-b16f-c0d1dfe48a02", "sighting_of_ref": "indicator--3a0db42d-5b7e-4aa5-ac89-b819f6e42d3f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b672e2-9903-48c3-96ab-bdc861ef2e29", "sighting_of_ref": "indicator--137e5e63-1cb7-4c17-9fa1-16d0fc8828b4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d45255-9243-4d60-8f59-4d6b284fa6c9", "sighting_of_ref": "indicator--3dc8a772-2ea0-46ea-8ad1-74dc247a2eb6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e01ad572-5d2f-43ad-8488-6393d472abeb", "sighting_of_ref": "indicator--9e0ae595-5d32-42ca-a81e-7a593bf528b0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7cc8236-4c30-4199-9d42-b1bba6c05ccc", "sighting_of_ref": "indicator--5d2eef31-9662-4271-aa5f-81475e17abb3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edbeccef-ab02-4e8a-9b60-e75ea0ae7f40", "sighting_of_ref": "indicator--634d7551-a05a-4a28-9e15-c732f98d3e50", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5edc0c1-a46e-4c6c-87b4-26b14004e359", "sighting_of_ref": "indicator--7e8c8899-ddc0-4373-a4eb-9cde36e7f655", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bbe372f-e415-4459-b7f4-a72824f8462d", "sighting_of_ref": "indicator--2363d895-322d-4764-8ee7-7ba5b163a0d4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71fcc157-6813-499c-a40d-c96cf174cf62", "sighting_of_ref": "indicator--af6e0f3d-0b39-499b-adaa-bb008104d01d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ecbdc15-53fe-4217-ab28-4b078debbb1d", "sighting_of_ref": "indicator--684481b2-539c-4e09-8d97-0d6cf368ac9b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1046cbbb-bef9-4e6c-91c4-46ee7343dd09", "sighting_of_ref": "indicator--52176d98-e41d-4ded-81a5-1be704eaffb5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b61961-d4b1-4e8d-8666-78979e519301", "sighting_of_ref": "indicator--b9f214ee-7635-46a5-914c-2af798085661", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031ef496-4143-41df-9aff-88f890ec058d", "sighting_of_ref": "indicator--0005df76-4eee-4c96-87ec-1266ead18605", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b175c9-8f15-49fa-92b5-8170af2b22cb", "sighting_of_ref": "indicator--37a719ea-153b-4b29-bfc6-60a0e756c374", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62616ec-8be6-475f-bae7-ff4e5e967585", "sighting_of_ref": "indicator--a71e5770-e48e-43fc-ae11-3bdfd314896d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492aea74-251d-49fd-b113-42b3bb6234e1", "sighting_of_ref": "indicator--343ef89d-705e-4ba5-a49a-b4620ebc832f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef79f36d-aa59-4f62-9488-59d0c56ea8da", "sighting_of_ref": "indicator--1f6d71da-3b57-472f-8817-5caeac7dd2aa", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b5e9ed-24c5-429a-a921-1faa8ccd784f", "sighting_of_ref": "indicator--377ef238-d084-4a70-b855-0beded04286d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6387542b-f437-4080-b4e2-9eb7a2cd4b6d", "sighting_of_ref": "indicator--22ba7433-2779-48ec-a309-1f2a697983e2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a14fb05-0957-4b83-b329-47e59681fb0d", "sighting_of_ref": "indicator--d666f02d-4c58-4ff4-a3e5-3db759001f42", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efbebb8c-dce4-4604-b162-b5e008b2833d", "sighting_of_ref": "indicator--12701b29-c914-4376-9a16-e3ebe7cb6d8a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae58a38f-8e72-4845-9a3f-dd6970cf034e", "sighting_of_ref": "indicator--487e41c2-0014-4c13-9abb-73c88a997389", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1a24b6-720d-4de5-beec-7243f31d0982", "sighting_of_ref": "indicator--7c70aba5-00d1-4344-a1b6-ee5a3dd62cac", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff0dbf7-82df-4341-abc3-57090aa18633", "sighting_of_ref": "indicator--7f2dc20a-8288-4b4d-84ed-ba80589e3a6b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d8d1c0-903b-45c4-9456-8d8564ad254a", "sighting_of_ref": "indicator--346695a9-4cb7-4bdc-a356-b98700b2d43b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98c37513-316d-4924-8504-73039c5380e7", "sighting_of_ref": "indicator--cd965984-fb3c-4a13-8c29-faa335f0b631", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95363e70-1eec-45f9-9b1e-db003750f337", "sighting_of_ref": "indicator--c750e641-657e-4f01-a95f-0b7ff539986b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--231ffafe-3bc1-45d4-8e09-352a4a233dc8", "sighting_of_ref": "indicator--886448f0-0987-40f6-8f65-1404aa1a307f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a57b1f4-4599-4dc9-af26-7b3e4058c91a", "sighting_of_ref": "indicator--b11dd1ca-da84-4d17-b7fe-84ac443ecead", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a362cea5-0cd6-4a20-8ee4-8b5b20bd0ff8", "sighting_of_ref": "indicator--58a35d8b-5d19-4ee7-9776-b8ed0694657d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd1cf6b3-0710-402e-be0b-599476c18aa4", "sighting_of_ref": "indicator--25757ac8-5b9f-4909-88cc-d1ddbce574b4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b42378-25bc-4b06-a528-0149ee577a76", "sighting_of_ref": "indicator--de2ef71a-ee06-41ab-a7bf-75bed27f2476", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dce48e63-ee8b-4a5d-8b3c-7c168ea1573d", "sighting_of_ref": "indicator--23c74b97-719b-454f-bd2f-07b2db70424e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce8ea248-0ca1-49ba-b655-42eaaa99b3a0", "sighting_of_ref": "indicator--e071086b-2834-4279-9c1a-0447a9367282", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8edd5069-a78c-4462-9d83-f0265eb9ad21", "sighting_of_ref": "indicator--11c51a8c-88a7-4cc1-8a87-173c9d3f8284", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e710420f-536c-447f-bba0-bd5b2a93bbc1", "sighting_of_ref": "indicator--79cb6dc3-543e-43fd-a3b9-5edbeb181181", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eceb49e4-d36e-4eaa-bc20-78353cd5640a", "sighting_of_ref": "indicator--df598309-bed6-4644-ba03-5de8a5083224", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb43a2f5-f360-461c-a08b-7a6c633ff7ec", "sighting_of_ref": "indicator--3895a67d-66fe-44c5-abbf-b2d0a3f682f9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c2608d-b8b2-4b63-abd9-68db4f4e295d", "sighting_of_ref": "indicator--3b989c28-1607-45a4-b228-6a77a6023efe", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f61442-3206-4392-be31-2bc3e36331ad", "sighting_of_ref": "indicator--f8a03270-8b21-4848-9743-2f9db07bdef8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef8d091-b3e4-4d6e-a421-7f25b54be700", "sighting_of_ref": "indicator--dd2077a5-b883-415f-bd52-e658b283d324", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b3419c-713e-45ee-9451-1b6fb1cccd76", "sighting_of_ref": "indicator--ea525b80-ff9c-47c1-b03d-6f8a0ca602e4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41721802-4ba4-4883-8dd2-5e20ed9b2c66", "sighting_of_ref": "indicator--bc064c54-ab52-4ba7-bbbe-f9a4b4bd864d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a1a6330-5b69-45d5-bf63-3ef2315ba930", "sighting_of_ref": "indicator--3571cbe6-842c-4645-bc66-bc6a13e4545a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc5c625-d1dd-40fa-900c-b10d99c11e13", "sighting_of_ref": "indicator--399f12a3-8d52-43e7-a712-f40a2dee5f1d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0002a95b-14a4-43af-9993-c5a18a30967f", "sighting_of_ref": "indicator--36380d7f-319b-4735-a1a6-24a24ce96200", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac88ee7-4013-4f6e-8767-7cb6e3bc22c8", "sighting_of_ref": "indicator--9b8fc3ba-ae8f-4e8e-824e-d4ed3b869cea", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefdbc45-c8e2-4b95-badb-8909fea3ad8f", "sighting_of_ref": "indicator--6cc37fd6-2b37-400c-bb40-b9af844c561c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d585c91-58b6-4eda-b06e-7bab0b59bcbc", "sighting_of_ref": "indicator--1e8423d1-09b2-40a0-ad00-a26def5e359f", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a7b791-684f-4132-aad2-29c2b94ea4e0", "sighting_of_ref": "indicator--88288f4c-7d45-493e-8e3b-aae85133782a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95cf0cca-8cbe-48da-a9ea-210db9e5c2c9", "sighting_of_ref": "indicator--0d6d9c19-a81d-4746-81b5-69a4c02ce354", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06c765b-62ad-44c5-b4cc-3269865dfae9", "sighting_of_ref": "indicator--c0fc0503-8e29-4fd3-8ded-95c9bc0a380c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5c7258-7c1c-4047-85e6-71cd38ae51b9", "sighting_of_ref": "indicator--b7c7e6d5-e0a2-4810-961f-6d28dc0a24d0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f28e9c2-dc36-409c-997e-125819f6155c", "sighting_of_ref": "indicator--4736528c-907b-4396-85d4-3d63c72a2d85", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb3067c-2163-4158-8e29-5c5c2517c0c6", "sighting_of_ref": "indicator--141e3e87-eb86-42c2-bbde-bd4263536c9e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de8470a-a2c4-4597-8eb9-6f2525e333c2", "sighting_of_ref": "indicator--2d2df1dd-0a1a-4f82-9435-efa37b09f76d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5458ab83-06ea-4310-9954-7653440bd6fa", "sighting_of_ref": "indicator--b2e7d9be-021f-41f7-9f80-eeba0f6c51fb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09bce9cc-812d-479e-a20e-b1d4394fee40", "sighting_of_ref": "indicator--d5e4dbc8-8357-4fa1-87b7-031d21e9787a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--474cb44e-230d-42ed-9726-82820ec10d78", "sighting_of_ref": "indicator--80ea1918-a279-46e7-81f2-2b56762f21a8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5319c717-240a-4949-84a5-a7f92214eae6", "sighting_of_ref": "indicator--8d4dd479-a3c4-48be-8a6d-85dd40ffbecf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8223e31-48c6-4829-ac3c-5d0177c0dc64", "sighting_of_ref": "indicator--66d45714-f6e0-4195-975e-f145bbd8cb80", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ccd847-fd96-40a3-8b4b-141cee808fe3", "sighting_of_ref": "indicator--b7d9a78f-a0a8-48d3-8da1-c0e91b3c79ed", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88eaa414-c46b-4429-8b73-f06bf90173a9", "sighting_of_ref": "indicator--bdcbf4d5-269c-4d82-8909-7151c363962b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4549ea0a-87f5-4a28-be40-42a0633f29e9", "sighting_of_ref": "indicator--1c33fcfe-6b0b-436c-839e-e2f6945efe92", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df35890f-8e07-4900-baba-19b90902ad37", "sighting_of_ref": "indicator--32734d31-782b-4289-8b44-106c51467833", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f2b64b-3056-45bd-b02e-a6e49f3dc8c8", "sighting_of_ref": "indicator--823ef1d2-478e-4dad-805b-1ef2030c4c26", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a00c35-1f5a-40a4-9c76-d56db569f34c", "sighting_of_ref": "indicator--7458dcb7-8c5c-45c3-b55a-894c2799e785", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d83df3-707b-4ff5-913d-f540658f3b60", "sighting_of_ref": "indicator--7f91390f-04ca-407d-b2ae-a42683eb9b9e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd28f63-b061-4077-8e14-5cd66bdb8b60", "sighting_of_ref": "indicator--b7cc9da7-fd0c-4c2d-8ba1-514084438362", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d515b66b-356b-4876-ac48-e5f940e9b54f", "sighting_of_ref": "indicator--e7b48505-21e7-4945-ba14-cb92fe75c9a2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a664280a-f936-4a64-b4d4-3f2c731d739b", "sighting_of_ref": "indicator--e694e122-26cd-4fd2-a462-bc4e80b9e50d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dfd3155-4044-4b06-ac45-25f964da6165", "sighting_of_ref": "indicator--5b103b95-8d84-4a08-b3d6-858fc34a1755", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac196ded-ee4a-4e5f-a890-93b771f0117b", "sighting_of_ref": "indicator--9ec4597d-de93-43f6-abb3-56961456a95c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca12abf0-4c06-495f-9c92-7830dfe011d2", "sighting_of_ref": "indicator--468115e7-d6d9-4d88-8d43-bd0f4c8d3181", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c86fbfe-79f7-4b48-aca8-e7f344895672", "sighting_of_ref": "indicator--bceb1528-3b7c-489c-a71e-57407104994f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551a14dc-1b4c-418a-ad21-c0377b350863", "sighting_of_ref": "indicator--e0e5ad62-461c-46bc-b333-1e9e25e6a85b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a01248d8-e20d-411a-8f88-f2fae25209d5", "sighting_of_ref": "indicator--eeed70d8-759b-4037-99e5-9612d2cd7489", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa80635-af7c-43c7-840a-bc06e53348d6", "sighting_of_ref": "indicator--560d08d4-a606-40a5-8872-26c175877821", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f854236-7bdc-493d-9e49-3326c535d806", "sighting_of_ref": "indicator--69976a33-4466-4cc6-9308-49b2261fd1ab", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01e8388-7f8d-4c3a-a76f-3219c19303c4", "sighting_of_ref": "indicator--716f897d-29d3-4032-85c7-fdd724f52f69", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64dfc7eb-4525-4813-b9b2-2c4b21ea601a", "sighting_of_ref": "indicator--febd75d2-cc8f-4c25-a040-4a13e2e6f3dd", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd39862c-590b-4d05-b157-043d64fc039b", "sighting_of_ref": "indicator--febd75d2-cc8f-4c25-a040-4a13e2e6f3dd", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9e3db57-c78b-4b6d-8237-d2be7195a33f", "sighting_of_ref": "indicator--c3e99cab-2a60-4e95-99b2-a374d70a8405", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2574ea0d-8037-4e22-9ca6-d85fb8a6bd48", "sighting_of_ref": "indicator--34c482d9-fac6-408c-ba2c-d537a832ca14", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b15bcf-f35c-4e05-9811-537df3cbc81d", "sighting_of_ref": "indicator--c4e32148-91ea-4f1e-bd0c-47c630a7df25", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c745fc4c-90e8-436a-b83e-2b09cbeb8888", "sighting_of_ref": "indicator--25c57f2b-cc00-4605-9b2d-468baf31edb3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd84dbc2-2bda-4d3e-8c03-7560c4ac34b6", "sighting_of_ref": "indicator--9254ed46-f94c-4cd5-ba7e-a0b42f49fb24", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f09c7c-acf6-4ff0-80c3-1d4fe3582850", "sighting_of_ref": "indicator--590d79eb-190f-4a2f-ae55-aff5939ef7b9", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c918ab9-0da0-45a2-a77a-8267d075ef92", "sighting_of_ref": "indicator--6ade6eb0-0ad9-4f8e-965a-69d650882656", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3338ddcc-e55c-4daa-8537-e4dfce866442", "sighting_of_ref": "indicator--976f14ff-0385-417d-b354-f74c2572cf92", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9af55f-266d-4ed5-8a4a-dfdde03ebde0", "sighting_of_ref": "indicator--9163ab03-c60f-43e9-b438-b40cb114e4c5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e3ee4b-08ff-4b27-bdce-39d496f43430", "sighting_of_ref": "indicator--6e400ad9-fbf6-4f39-a384-e69486947c3e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331f7c46-2178-4cdf-8c78-a11d07c55a70", "sighting_of_ref": "indicator--a5e0c348-064e-45f9-85c0-8286f935f55a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94647465-fe4d-41eb-96ac-967230fc0857", "sighting_of_ref": "indicator--6561fa06-c640-4c2c-830e-6741f29f849b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45f58af9-aebb-4131-8a72-c12785e3637c", "sighting_of_ref": "indicator--38fd71d8-590f-4f46-94e9-ff10dad66ba1", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a31e3a3a-cf2b-4d24-8298-3bfbbb9b15ea", "sighting_of_ref": "indicator--38fd71d8-590f-4f46-94e9-ff10dad66ba1", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15999ec-53d0-4efc-bafb-bcf1f52cd394", "sighting_of_ref": "indicator--e4916aa5-457b-4b44-aace-f7b30d5b78e2", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b0d04fc-4497-4ae4-af19-e7895cf14482", "sighting_of_ref": "indicator--e4916aa5-457b-4b44-aace-f7b30d5b78e2", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07585c58-55ea-4aac-b82a-e4058386e617", "sighting_of_ref": "indicator--c60a5ffd-c158-4d53-a94f-2d8eb0d18473", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b296082-4da3-4481-9187-80acbfbde043", "sighting_of_ref": "indicator--97c9a1cc-5dba-4c68-afd4-6c0c24460ddc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e29be54-1d49-4068-8734-493ee9966281", "sighting_of_ref": "indicator--9af4d228-66e7-4070-b3a2-7ec0b10fa252", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8277cfba-166e-48fd-b259-0fed1df62639", "sighting_of_ref": "indicator--9af4d228-66e7-4070-b3a2-7ec0b10fa252", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe8b0dc-adef-4af6-b82e-f95d890f053f", "sighting_of_ref": "indicator--bc410274-08ba-4bab-9e11-5627465feedc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--550b11f7-a722-46cd-bc69-442820f0bbd3", "sighting_of_ref": "indicator--9812e4c6-9a4f-4497-8639-f7aefb7b6830", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d24b92d-0388-4aad-bae7-d353d9e1f289", "sighting_of_ref": "indicator--bafe1b4f-4af9-48e5-aaaa-dfcb642d93a0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac563b2-a708-4ae7-809d-b24d4670df3a", "sighting_of_ref": "indicator--0f28fbf4-9b58-4246-abd2-00597e6aeb21", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd6a77a-0a8a-4692-8c2d-c3a88e1d0741", "sighting_of_ref": "indicator--0eb1a221-07a0-4308-9ede-3329838c2ae5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa84c055-607f-4ede-aa64-cc771be4d7da", "sighting_of_ref": "indicator--acdcb32f-fbe3-428d-a4ac-2476d4f60287", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90b8fa7-ac71-4252-982f-2261a0a95bea", "sighting_of_ref": "indicator--b03a89d7-cb73-4b97-bfd8-fd2fedf74400", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--499ac976-87c9-4153-a4b7-724a58a94f61", "sighting_of_ref": "indicator--771e3cfe-52e8-4fcb-bf6d-67ad9938caa1", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b930f3a-ddb4-46a7-afa5-284eb8816705", "sighting_of_ref": "indicator--771e3cfe-52e8-4fcb-bf6d-67ad9938caa1", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d75713-8b4d-4d25-bda1-c4931aa6ac23", "sighting_of_ref": "indicator--991d7c72-0e01-4173-b09c-309a29134815", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b21dd2-cad2-46c4-9482-468bb78c237b", "sighting_of_ref": "indicator--1a89b19e-82b3-484c-8526-92f987533661", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21cffdde-33e3-44b9-8288-1559dd2651b0", "sighting_of_ref": "indicator--1a89b19e-82b3-484c-8526-92f987533661", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55a5fc3-01f7-4973-9d79-6a8c90532a80", "sighting_of_ref": "indicator--b007f931-574d-4ff2-9d3c-16651c2cc49b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38b0631-cdaa-41d7-86b7-a80ec155798f", "sighting_of_ref": "indicator--c4c20df6-cd1b-4dea-a51f-1ae3af7187d5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--519e02f9-17cb-4d39-a453-588f2f29c248", "sighting_of_ref": "indicator--d620f124-8f43-402f-8081-d72c87c04296", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f19694a9-ac5e-4468-b3f2-0afb1c253586", "sighting_of_ref": "indicator--2e159d38-9864-4cc0-8f87-6dcfd8b1c830", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89461893-36d6-4613-8bb4-630c6b107b0e", "sighting_of_ref": "indicator--b1e94884-d2cd-41ad-9268-6f671b81b7ca", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e9fdf5-ec2e-4561-8538-715918974389", "sighting_of_ref": "indicator--a3d7f402-1eff-4abe-92a0-d83e4126267f", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f58714-b045-4491-b641-459135f4129a", "sighting_of_ref": "indicator--c5a07b6f-203f-48f8-8f73-515ff54645c8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7396b073-cc20-4ebb-9989-66e45ee1e7fc", "sighting_of_ref": "indicator--53994d64-5b34-4978-b69b-10f2e220e056", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbaa4af-aff9-455b-a91e-08c9792b2ff3", "sighting_of_ref": "indicator--06a52071-4176-4d81-a572-d993975739ca", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fae46f2-8ae6-4ad0-a821-bbc898120aec", "sighting_of_ref": "indicator--1489a729-95a5-433d-8a0f-ee43343a68be", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615f62f8-32a6-46d2-afaa-c77c7dd1bac0", "sighting_of_ref": "indicator--ff1d7152-6ef2-4e1b-a2f4-6d91bf4dfefe", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c2bd68-85be-437c-b4e5-0b43f5d1dd4a", "sighting_of_ref": "indicator--28229780-6329-42fd-879c-cd1152107d1b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d2fefd-275f-435f-97e3-11cc863a456a", "sighting_of_ref": "indicator--2fbbd3e5-207d-4a3d-8a6e-82dfe066447c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc28eac-748c-4028-b2ec-232dfaf9b0c3", "sighting_of_ref": "indicator--ed65e716-8b97-4bd0-91dc-ed96445028b6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba37f975-24ff-4d58-aa68-52a49648ba31", "sighting_of_ref": "indicator--5cd85456-6491-4060-bcb1-427ba09ce903", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccaed7d4-6327-4519-9a3d-6336ed1d3a43", "sighting_of_ref": "indicator--7fc9d6fb-88e1-4a3b-b04e-736cd34f952e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d3fdb0d-b8df-49c0-bdf3-db92b40bece1", "sighting_of_ref": "indicator--392b2ff3-7d59-4233-8879-3c442873eedb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe4b194-0ae1-4dfd-a960-55803a2e8c08", "sighting_of_ref": "indicator--2d555553-a610-4b56-80b4-b3d7bc614f82", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b78703-f00d-45c3-a18e-20fee302aaad", "sighting_of_ref": "indicator--2a61b1b3-a50a-4228-afd7-1f0d7c24e79a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c602cc26-9ee0-489d-ad44-206a17aa8c56", "sighting_of_ref": "indicator--afbe5aae-35c9-4fb0-992a-5cb7f7a421b3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adcda98c-e288-4f31-a035-9c1571f86d5a", "sighting_of_ref": "indicator--50ce46eb-8277-44e9-ad3e-e963f69eab78", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee82902-347c-4145-934f-07ff861361bc", "sighting_of_ref": "indicator--8c47e122-26d5-4a35-8444-7ed8bd328b77", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef725ed-514a-4908-9d92-243f8e7ca55d", "sighting_of_ref": "indicator--fc6abe4f-3fea-493a-a1ed-7bdbd4c23fdb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4762ec-4459-43f1-b4a2-017d8c49d3a8", "sighting_of_ref": "indicator--b8ed383e-0339-49d5-80f9-1994956cca64", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291872df-85e8-471c-b0f7-f7d22a64fa73", "sighting_of_ref": "indicator--421e742a-7232-4ff6-8036-b3e880ef30cb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f47c93-deb3-4605-823a-6389e1e92e05", "sighting_of_ref": "indicator--bcec21f7-8b80-4e0f-82c2-9f7e999dac61", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cea3caa-e40e-4170-ad37-28e9aa7f1d0d", "sighting_of_ref": "indicator--21328ba0-b288-4bc9-b645-8476fd1b00da", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2890ca97-db71-403d-b4e3-92796a9786e5", "sighting_of_ref": "indicator--d2b9e866-4240-4b61-82cb-956b637c7a64", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a79956-0d57-4443-836c-32b9e1d6dbe3", "sighting_of_ref": "indicator--ba842b07-430d-458d-a02d-d0c5251e4a77", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a63a3c9-a3e9-40bb-818f-a3e104cc0be3", "sighting_of_ref": "indicator--a186d531-9654-46cd-9626-70e2a835650d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22bbd1d1-eb1b-436a-8a59-3305c3fa8b16", "sighting_of_ref": "indicator--decece20-9466-4e75-9ef7-9b137838d491", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b82a7d7-66a1-4cb1-af3a-912950717750", "sighting_of_ref": "indicator--0c5fd7d6-23cd-4eec-9282-45df030826e5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a254a4-ea85-4ddc-b3c8-b91787ae4e25", "sighting_of_ref": "indicator--4848e35a-9a0b-4270-99ab-e5b834c129f5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd57fbee-51fb-4508-9486-b9b450cca738", "sighting_of_ref": "indicator--b0324ed7-6664-415a-9cf3-ce01aa1b6a24", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd357e21-0e12-44d9-82de-b05a5068e643", "sighting_of_ref": "indicator--a4a985f4-5c97-4aea-8641-ced6b9d710de", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235ecdf2-0ef2-4db8-a759-218102e700e5", "sighting_of_ref": "indicator--0155ad96-b049-4ab6-b2fe-af3abf631215", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55047c6b-1683-41d2-b500-8e10a7a80556", "sighting_of_ref": "indicator--dcaa4913-c123-433b-8946-ff36756b76ee", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65acf79d-a931-44c5-aa85-a06a3e894f17", "sighting_of_ref": "indicator--bab654de-cb62-4854-86ae-68976dfbb026", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92093f9e-1d99-437e-b4ba-67df23b32509", "sighting_of_ref": "indicator--4e53c914-784e-4b32-82b9-52355f36d595", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bef4f22-5287-416c-adc5-9193c27819f3", "sighting_of_ref": "indicator--7a2bdc27-a02b-4342-84ad-51ec349195d9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3d2ff3-387a-4547-93e0-2e3ad33f35a6", "sighting_of_ref": "indicator--943136f3-8f34-4d74-91e5-096f3298e04a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb75f9d-23d0-477f-a181-a2adbad2867e", "sighting_of_ref": "indicator--615757db-5670-4e23-b8f0-02502461e770", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade7788a-9751-443f-9406-d7684f7ffd31", "sighting_of_ref": "indicator--7dfc44f7-c599-487f-aa35-3c5199c28855", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a28b82d-2c41-419b-9f61-799552cdb3f2", "sighting_of_ref": "indicator--59215fbd-a797-4f4a-9b3c-e1c6e3a84d4d", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc7d23f0-82a3-404c-acb0-dcbbbf37a6ea", "sighting_of_ref": "indicator--59215fbd-a797-4f4a-9b3c-e1c6e3a84d4d", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47525508-965d-4e4b-ab01-2cca1d165289", "sighting_of_ref": "indicator--0340e928-0c7f-4ad2-8236-da6502132bbc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d18c48-4129-4e9e-afa0-4bf4428b10d2", "sighting_of_ref": "indicator--d2d61517-3133-4a61-9e06-0e6deb47c724", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b80d0189-3314-48ce-9df3-a6f7e68e2bec", "sighting_of_ref": "indicator--df7fe555-bc53-46ca-b7fa-c95c20e96865", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d1e604-d275-4ffb-a73c-c1bd93b4f641", "sighting_of_ref": "indicator--a09da859-975b-45b0-8688-615cc9598b0b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55bc573-a66e-488a-9d5d-6daef34b295f", "sighting_of_ref": "indicator--b586e7c8-61ca-41cb-94d3-65b5b6f15a7c", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c501e6-60d0-4602-93c6-eee7bbf2eff0", "sighting_of_ref": "indicator--04b290dd-c606-4ed6-ad2d-9edd754a761c", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b190226-5d3a-4522-ab9e-62b65180edef", "sighting_of_ref": "indicator--d3a56eba-b34e-4f04-ab86-4ff3af9785c4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313caba8-dab5-43d5-ac52-34640481345a", "sighting_of_ref": "indicator--c4b8f970-6f2d-4a92-bbc6-5c7b404f7375", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc9258f1-3b10-4946-96e0-8d4123a13079", "sighting_of_ref": "indicator--b4eaeeb0-4ea2-41fe-a039-38efc38ff78f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e83f226-1585-4bad-8146-96e50c92ced7", "sighting_of_ref": "indicator--b5603241-747c-4f4f-845e-c411ad126535", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b38d7070-0d07-46d9-b63c-6080af3711e2", "sighting_of_ref": "indicator--9d79b5c7-0aee-4c54-87fd-3854d8c33407", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96778de6-68e8-4783-ba8d-6b5a10cc2ac7", "sighting_of_ref": "indicator--1a45d345-6aa8-400c-b050-181d7f8df284", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f301f25-cea6-4651-a4b1-8c3560810146", "sighting_of_ref": "indicator--191e0cba-89f5-4dae-bde4-0156d75706c4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4087410-60fb-4584-aeff-4c10e8fef198", "sighting_of_ref": "indicator--c7d90290-88cf-4b02-a8c0-16ae096379bf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a2d4407-bce1-4af1-b22d-7c25e969e561", "sighting_of_ref": "indicator--a0e51ea3-5d14-4fe3-b19e-667fe74d03d2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f70e69f-1b12-4a92-89ed-c0ce07b7c32c", "sighting_of_ref": "indicator--6f53081e-b2d9-4aa4-9210-54f54faf1886", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae60baa8-58c5-4d2e-ac45-2088d3e051b9", "sighting_of_ref": "indicator--008553e5-506e-482a-a509-cbc30d6d0a43", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01186384-0e9f-4e36-98c7-bed91e8f14fc", "sighting_of_ref": "indicator--81254dd2-7140-491f-b092-ba2f0fe2c876", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a9d3347-482c-4b81-a8f2-56e55f91764c", "sighting_of_ref": "indicator--7cca97a6-75e4-4211-9f58-f4ba45cab0ff", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90351f79-5a23-4ed5-b724-66f796c2d478", "sighting_of_ref": "indicator--c6dbca37-c9b8-4906-8894-7a002cfcd8d2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2d4d95-fc90-4b3f-996c-79e3210aa4a6", "sighting_of_ref": "indicator--7df4939c-5ebc-44b2-9056-da546f649a54", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--823284e2-df6d-4070-b418-61f5901028f8", "sighting_of_ref": "indicator--736da479-71bf-412e-860e-9152956a1f86", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7640bf0a-f402-4926-a2b5-2101022ad1d5", "sighting_of_ref": "indicator--e9894f52-b6ee-4ab8-b5c6-56bf53f1996f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8060cf0d-f647-47af-98d1-5f60b9d140b2", "sighting_of_ref": "indicator--0622c2ce-6bb4-4b8b-9013-9e1b4f1a5970", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0372ea51-eaed-4c18-b09a-6ede5a234efa", "sighting_of_ref": "indicator--b0f01395-3ac3-4608-aede-0115c83abcf9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ea38a4-7182-45cf-b33c-759dda26228a", "sighting_of_ref": "indicator--592dc5d5-08c0-4b33-b515-cbb3071674a7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a81818-9aaa-4975-831f-b50081b2ed3c", "sighting_of_ref": "indicator--08075aae-e403-4eab-973d-7a0602bfe0b7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205a2b7c-9728-4f09-a47c-569b8ec65a65", "sighting_of_ref": "indicator--bf9adf64-f71a-469e-a143-68542fe2ea95", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c86f124-97e1-4043-a393-9a8e6e3d9d4f", "sighting_of_ref": "indicator--7d05d02e-ebbe-4ed4-b62b-c9976eb28bd4", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9694cd39-3e47-4700-817a-59d58984b39c", "sighting_of_ref": "indicator--7d05d02e-ebbe-4ed4-b62b-c9976eb28bd4", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec42344-1842-4f27-8647-b99fe68e6e4d", "sighting_of_ref": "indicator--07843e30-be8c-4b9b-a4d0-44f6f1e59f0f", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddad951b-e3d3-4d8f-b850-7f68998b458c", "sighting_of_ref": "indicator--6a9c941e-b036-4759-99b8-4f107a7bef07", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb17c24-51d6-461c-af3a-983f3b81819b", "sighting_of_ref": "indicator--a8442082-6818-4261-af8e-d2c5aa88c584", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b37579a5-9516-4c5d-9e5d-baab9e9bd624", "sighting_of_ref": "indicator--c841724e-e436-4cac-8073-3b9a937024de", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3dd280f-9531-414c-9de4-9601873fb888", "sighting_of_ref": "indicator--dbef7cd6-7106-4e35-8493-5deed9870301", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81076cae-4ca7-4265-badd-18d46016a629", "sighting_of_ref": "indicator--9f1afcee-cccf-4aea-adcb-4e38a3522184", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfdc2334-0994-4cd7-96d5-bc4c7308122c", "sighting_of_ref": "indicator--cf3d7c38-6b15-4be8-8432-3886edf7332a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e2d761-b9e9-49d0-8f53-e0b23bfc127f", "sighting_of_ref": "indicator--04c13d27-97cd-42ad-8a8e-acb1f6ee09a1", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b0a31df-75a2-43d9-8c59-de3674e046f4", "sighting_of_ref": "indicator--1bff7cdf-89d6-4577-996a-aa1728f7aa27", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0346687d-7f46-4428-83c6-cb6159d01879", "sighting_of_ref": "indicator--36c97f18-7ef5-4af5-ba93-4db5d260a849", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ddf8199-859e-4a07-9135-7c001792e242", "sighting_of_ref": "indicator--345ae114-c4aa-4773-9faa-767e0803ca8f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235edf1d-def4-4799-ace9-4a4f0bc6cc1e", "sighting_of_ref": "indicator--677f06fa-6ce7-4487-af68-f4f970fae05f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f952d21-affe-4970-8c69-2acc48c55826", "sighting_of_ref": "indicator--5fc83cdf-bd65-4199-ab24-e7d407b60bb7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd2ab30-d627-4e01-b9bc-47334369366f", "sighting_of_ref": "indicator--d89c019f-d3fe-471a-9334-e4b02b25c91a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62dbd1c-9ba1-485f-b4c0-25d93d78db4e", "sighting_of_ref": "indicator--3dc7d92d-b10d-4615-ae1f-d7e78663b534", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b245ed-da4c-4221-b296-24638de700c6", "sighting_of_ref": "indicator--944e5c6a-326f-4706-87c0-a0590c4a163c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2e86d0-eef7-402f-a0f9-c199c04a4ec8", "sighting_of_ref": "indicator--9b849601-0b17-4843-a541-6a109d393537", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530d7452-502b-4df4-9922-ca4f754895db", "sighting_of_ref": "indicator--c02b5393-da2c-41fc-bd13-0e0861e73e6e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de395715-8944-440f-af4e-3fcde5a71a3b", "sighting_of_ref": "indicator--a2dded52-2978-4777-b1f0-3c27cbe3f42a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446b7e4f-f570-44f9-b366-4cf0cba7e9ad", "sighting_of_ref": "indicator--6778ae83-f5f7-4a21-bf8b-810e375b3297", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb16c40-2b1d-47c3-8b91-4b88d980a425", "sighting_of_ref": "indicator--8bb49f79-9f02-4bd7-9253-d1897ef58095", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39aff001-7aa0-429f-8fd0-02957cec21b0", "sighting_of_ref": "indicator--412bb345-f939-4782-b60c-82e9e355fa6b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91011831-70a1-44c5-9473-7a0774257df6", "sighting_of_ref": "indicator--53528acf-aed6-45b3-ab72-68b25d995e7d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c2c25d3-e214-4dd0-a49e-3a3afb4944fc", "sighting_of_ref": "indicator--f523f7cc-0446-44f6-85e0-604535f847e4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c937ea8a-e068-4eb2-8eee-5a4676684b8f", "sighting_of_ref": "indicator--cb2feac5-b5df-41ef-95e2-f9f94ac248e0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b438d5a1-7a47-4aaa-acaa-70e2c7fbcbfe", "sighting_of_ref": "indicator--64f48ae9-b15f-4db1-8f1e-00fe94d71d79", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01ea987-2af9-4a08-9855-dd26996bb63d", "sighting_of_ref": "indicator--5afa4177-8cb1-4b33-848e-18673763f185", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ada4c11-8bd8-48f4-b109-44ac71d5d517", "sighting_of_ref": "indicator--652260da-04d2-4a39-9ec9-4e197942e7cc", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac5f163c-2349-4b8d-9e3f-8c6185e60023", "sighting_of_ref": "indicator--652260da-04d2-4a39-9ec9-4e197942e7cc", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4edf90-dd75-41a2-8b3e-5988319a007d", "sighting_of_ref": "indicator--bc176dc6-b86a-4bb8-a011-6889f1193988", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a8d678-efd2-4756-8791-7dc597ba4460", "sighting_of_ref": "indicator--e4db22c1-ff96-403c-8f9d-b39faed88f1c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b3282f5-70b1-45f5-a647-dd04cfae6ebc", "sighting_of_ref": "indicator--428fe4d4-f1d7-4bb4-b309-6169e0ff4c53", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caebf4b4-e18e-47cc-8fe3-aef7459ad5e0", "sighting_of_ref": "indicator--86930534-1e65-45d6-b064-04d8643dcafb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd30fc9-9b60-468d-a639-0f42616209af", "sighting_of_ref": "indicator--01aa9f21-7c5b-46f5-b4fd-0150473df729", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c0f9848-bbb3-43c6-bfac-d7f1cc3082b5", "sighting_of_ref": "indicator--c6c1cb27-d5e1-413c-84e2-c3f5a5ee034f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d67e72-503b-4ed6-a8f6-1ffd24c116cc", "sighting_of_ref": "indicator--fa761ff5-df7a-4464-947a-a3d5118de18f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5882b500-2e46-4d46-b78d-39d0cbac6693", "sighting_of_ref": "indicator--107e6cdf-9454-487d-bbb6-18c9f4531e9b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cce55f-f17e-4b88-935b-760174c05ba7", "sighting_of_ref": "indicator--8fe6292c-47ef-41ce-a115-94f132440374", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48c280d-3117-4898-a37c-4d197185edf8", "sighting_of_ref": "indicator--86729896-a26e-4e45-a2dd-b8b72a3d092f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535d3b0c-ca1f-4bc4-bdf3-5c1e88071a83", "sighting_of_ref": "indicator--86afe67f-f4c8-4c8e-a7ac-0b506d52ee5a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73941ab8-36c0-4ec2-8b56-467db421fbf7", "sighting_of_ref": "indicator--954b67e7-0de1-46d1-8989-40e3ff416d72", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6fcef91-aeca-44eb-a18d-5988068de586", "sighting_of_ref": "indicator--2997cd40-5fae-4ce3-ac57-1b441400f1e2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530dac48-0ebb-4980-9b96-0d5ae232c2d1", "sighting_of_ref": "indicator--0ec5458b-bc81-4518-99cc-38d4266f450e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291cc8aa-64c2-40a0-835c-3e34d679b5d3", "sighting_of_ref": "indicator--3fbc9a99-e106-46ef-aa94-c62509dae101", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e9aa3f-a8a4-4aa4-8a74-68da708bbe30", "sighting_of_ref": "indicator--61796aa1-be1d-48a0-98aa-eb54d81d30c3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee64b6f1-bc9f-4c27-a1b4-1238d1b5ef5e", "sighting_of_ref": "indicator--8e252233-24f0-41d5-99d2-be40cf7b2cb7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9efdc3-0011-4ea7-ab76-f2ad0a3ee606", "sighting_of_ref": "indicator--b73c47f0-ba35-4e8c-b84b-8c98c2d25dfa", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0b120e-dbd8-49ba-892b-96d8a4aa4994", "sighting_of_ref": "indicator--025a6ec6-0fe2-4ae3-ba68-06e01e3dc98d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36510e04-8eb0-4162-b6b7-24fc5611b212", "sighting_of_ref": "indicator--0537e403-01e1-446f-9768-05505f950d22", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b254cf7-546f-4ab5-aeda-d5c3a93ce2d0", "sighting_of_ref": "indicator--4c9ab7d9-0666-4890-8ed3-c070a4d65088", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566e3c70-e152-4d73-9d7a-0d886810089c", "sighting_of_ref": "indicator--9334009c-2969-4ef5-bb8c-0e9b8777bdff", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee6bd3ae-fa9d-4ec2-a879-16f37d065153", "sighting_of_ref": "indicator--00bbf5f3-e560-4efb-b68b-afdae5da75dd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18bfd6a4-d9cb-44ac-ba02-804f4839dffd", "sighting_of_ref": "indicator--a1aa50fb-c215-47fc-b8f5-9fb9e5c19638", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc6bf80-5211-4865-b999-83b923d1cdb1", "sighting_of_ref": "indicator--97f7b34c-365b-4da2-b601-851d1c1b5aa8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992707cc-e46d-4a27-b086-9493663d8a06", "sighting_of_ref": "indicator--fee700bb-ba56-4abc-8959-9fd9f7fa263f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce4f824e-931b-4251-876e-837d75ba65e6", "sighting_of_ref": "indicator--8b46df3b-b341-4145-8ad2-b22393f46409", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a02474-df3d-4c7b-9c43-ebf0fe80e0a2", "sighting_of_ref": "indicator--9a036d22-6d8c-4235-976c-d42c230849e2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01de5c9a-0508-4d7f-a66f-a60c50109c57", "sighting_of_ref": "indicator--6ac37376-57b9-493f-82ef-f8e9d24cb7d4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--483b35c0-8ef0-4ccf-846b-d92e75a45ced", "sighting_of_ref": "indicator--a0cec21e-6bf7-42a2-8ac7-4494339cbc0a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98c79b05-71ea-4381-aca9-cec9ec40da5a", "sighting_of_ref": "indicator--68085305-4e3c-4097-bfd1-74326ced42e9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d20ed8-8e7b-4348-83b2-d7b8f796efa2", "sighting_of_ref": "indicator--bafaae23-7947-470a-a631-4b9b4cd70d56", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065f17c1-aff8-4703-a430-2950cc14d30e", "sighting_of_ref": "indicator--0ccfd5ee-07be-4dc8-8c9c-045ad2732fd1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837ea065-bf13-4a2f-ac84-e4a4520e1750", "sighting_of_ref": "indicator--d8ca55ad-d6b8-4cbd-937f-83188ad13179", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c553aa-5f46-4d2f-abed-50c5d77d39b3", "sighting_of_ref": "indicator--4e81f8f5-f4f0-4942-8d3d-441206c1ce43", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb41fce0-d9db-4693-adf3-64703469ade9", "sighting_of_ref": "indicator--ddb3aa23-8224-443e-8b58-dada1898ae38", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4425466-9d52-40a3-ab60-593f21284855", "sighting_of_ref": "indicator--c1bd3c7b-186c-4ea0-8772-c5b1a9d3dc47", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13515057-d6f4-44f9-b9c0-1b3896d0c03c", "sighting_of_ref": "indicator--c3c43266-a558-44d2-a454-30d8e38f7ac0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3cfd3f7-5a15-46cb-8910-b99512b505da", "sighting_of_ref": "indicator--5de53cc4-25b5-429c-beb7-a46992765b87", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c0b02ff-52f5-4867-a6b3-2d2452272c5e", "sighting_of_ref": "indicator--2d0fe2cc-46dd-4c7d-ae20-1e62feff5c92", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--343b7dad-c538-497f-b9e0-9eacee721dd1", "sighting_of_ref": "indicator--a6085e48-5aa5-4d8a-abe8-abcc3c056503", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e79e5397-07c8-4cf2-b19c-5b7be7c3f155", "sighting_of_ref": "indicator--532dc3fe-6974-4b26-9643-d897af7f66ac", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35039606-1b6e-4d4e-a44c-7699a9147070", "sighting_of_ref": "indicator--8c633575-c067-4e11-a032-2648a4632232", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--232b95df-9fc1-4f65-a3eb-b2818dc3433d", "sighting_of_ref": "indicator--369e36b6-6509-4c25-b29a-37a4e61829d5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d34e8f-fb86-470b-bd55-c05b4bbe5a21", "sighting_of_ref": "indicator--6441f32b-70c7-4179-96ea-7aff966962a1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a7e30ce-24d4-4f5b-adde-bf17c795dc72", "sighting_of_ref": "indicator--c789285d-4ece-47d0-b1d2-9e273df0d4bd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ce9385-521b-4442-80b8-aa19a96dfdd5", "sighting_of_ref": "indicator--155123b5-8b7e-454c-ade8-a38bf7338073", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ceaa95b-ee3e-4181-ba2d-29d64dd61fb5", "sighting_of_ref": "indicator--eae3a542-d55e-4354-a727-04d126876b6b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aaaf3d9-4c8c-4d8f-8ec7-de25992021a7", "sighting_of_ref": "indicator--4d9d4b3f-cbff-4f7a-9548-dcdbccfbc0f1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaca64c2-b4dd-47e9-a361-7ac3cb7c235b", "sighting_of_ref": "indicator--56f396fb-1355-402e-adf5-96f81f5ef25c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c4129c-7b9c-404d-a81c-7484d64659f2", "sighting_of_ref": "indicator--2a39535e-dbde-4d82-9d81-a1c54f1070c2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11630240-0347-4dd2-a739-60d43e1654c2", "sighting_of_ref": "indicator--ba36f6fc-24ef-4349-8d4b-6d88dd3ff883", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bab2436-4951-4997-88ac-bf14065bb3b5", "sighting_of_ref": "indicator--ac651849-962c-40bf-8faa-e7aeddf585fc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c220b584-5e96-4e43-8e2d-c8394aca5ed8", "sighting_of_ref": "indicator--a41d3886-e3d0-4131-b5cc-f4e75eed97ec", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8752e65-df0f-42a5-9434-1f088247c892", "sighting_of_ref": "indicator--27beeabb-5910-4b6e-880c-dfac8a91626b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46df9a7-bbb6-41f1-8798-3439318db70f", "sighting_of_ref": "indicator--623a289d-939b-41bd-9d60-881555583d50", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb446fe3-94b3-43d0-adce-b3b5462dbb40", "sighting_of_ref": "indicator--9d0d56ac-1a15-4e5c-ae62-f1e8b199bfed", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--763b489c-0be9-404e-9d0f-4d238a4e1b9b", "sighting_of_ref": "indicator--a33897ed-8b6a-42e9-81e7-bd3fe9defb12", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--783670a6-32fb-498b-9dd4-3bde299cc35f", "sighting_of_ref": "indicator--0301f650-f2d0-4aab-b9f8-d6756eb8c640", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55868253-31f6-44f3-a1c1-768a7034f65f", "sighting_of_ref": "indicator--b60d3d90-984c-4d40-a48e-60644cb83388", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c4cadf-c5e7-41c8-9f78-7af8ae9a1b4d", "sighting_of_ref": "indicator--3c9459d5-5e48-4dc7-b252-dd4651948fc4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9320a22f-debe-497a-bc37-174d17a62914", "sighting_of_ref": "indicator--014a3ebe-c382-41e5-8bd2-e5cd131017aa", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c871b5-894a-4a12-b78f-63d71430bf2e", "sighting_of_ref": "indicator--e1f351f1-6786-41bb-b878-c7a30ad46beb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da9f5c7-1cd3-46aa-bf00-eb6893afd509", "sighting_of_ref": "indicator--a49e996e-80c8-490a-b535-433f070e3589", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3825c4b-8515-4d41-af24-c1743fe6dd9f", "sighting_of_ref": "indicator--e6cc8e49-a3b4-474c-b2b5-dff25ff83b58", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e16988-539d-4080-8eb0-dc7a29e524dc", "sighting_of_ref": "indicator--b1aad659-1620-41c5-a8ed-0cb002bdb32c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d2911a9-b8b6-49a7-9bb4-edfd4a106e5f", "sighting_of_ref": "indicator--68385952-e3c4-4a88-bfc3-b9c5c34780a3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f90a0fe4-42c3-41c9-a30e-4b1a41c39a1d", "sighting_of_ref": "indicator--bf48732c-e7fb-4655-be32-c2b3598a8d41", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac78832-4c65-4894-914a-223ab4804e08", "sighting_of_ref": "indicator--3c8e1ee8-72a8-40e2-99b2-a774352b1d48", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d76617b3-370c-44db-936d-cd3396413ee2", "sighting_of_ref": "indicator--452c0216-e2a0-4f50-91d2-b464ae75dff6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cadcade-ea8d-4c0c-9daf-4a2233685bad", "sighting_of_ref": "indicator--27b69d63-3ff5-490c-8814-3ee1b53edb57", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--890d2c48-570e-44c7-96f8-6b9861cae0b1", "sighting_of_ref": "indicator--29ce1e2c-9033-4a9b-b2f1-571a9178130e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4382abaa-040c-4897-b7ae-ad2d1b79ed8a", "sighting_of_ref": "indicator--94fcad04-13a1-4b85-8f9f-b746bb7b62a0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b70ab56-a973-4123-b0c8-be408277b8fc", "sighting_of_ref": "indicator--cd9b7aa8-7fe5-43d4-aeec-a15bebd363e6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3405525-8b86-420c-b899-c4eae68179ea", "sighting_of_ref": "indicator--e33e47a5-e892-4a10-b42a-61b1da8dcf83", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d65baf-530c-4da6-ab27-3b7324355035", "sighting_of_ref": "indicator--6b9d2797-a2b1-4c3a-a21b-1773cecb5304", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c6146f-f766-4173-8511-551cd0ccbcf3", "sighting_of_ref": "indicator--6c1e0ac8-2a38-4833-92bc-c69515d0cbff", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8afce19f-3809-4ccc-b9e5-697601f97041", "sighting_of_ref": "indicator--88d34cef-a343-49e6-a6cf-a5e52e327f48", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ba5cb5-47fa-4bd0-bcf2-950575e98745", "sighting_of_ref": "indicator--88d34cef-a343-49e6-a6cf-a5e52e327f48", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b143a7c4-ab0d-4c19-917f-269ef57f246e", "sighting_of_ref": "indicator--f7a70912-2640-4f7d-b48a-8ba7d1fee83e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e929365-78fe-42a2-b052-65c62ca303ed", "sighting_of_ref": "indicator--80f15709-dce9-41bd-9192-a3389f25e0bd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c6b902-95cd-4826-99a5-7a853c5dac23", "sighting_of_ref": "indicator--1d76fc47-636b-4d10-9913-0f056101b87e", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cbaa2ca-28d6-4f4a-a880-d0d6d7060c98", "sighting_of_ref": "indicator--1d76fc47-636b-4d10-9913-0f056101b87e", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6a2652-4792-4e4f-8f05-b126f13d565a", "sighting_of_ref": "indicator--a35de694-7574-4272-9a4e-54c9bd797f0e", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c780ee-3545-4204-904f-e7518ca4320e", "sighting_of_ref": "indicator--a35de694-7574-4272-9a4e-54c9bd797f0e", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b2ab41-83fd-4281-b2c1-0c2e603132ed", "sighting_of_ref": "indicator--af1a780b-dd45-4eb5-aeb8-65f6af660a95", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f2f87e-249a-4e36-a978-ea13c636acbf", "sighting_of_ref": "indicator--27f78536-0909-4eaf-9a38-d518f4c239fa", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e164304-817b-421c-86db-57f79562665f", "sighting_of_ref": "indicator--90e5b712-fbe4-4c6c-b5b0-495c999e8afd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762d9ac4-fc3c-4ad3-9106-d4a435f943d5", "sighting_of_ref": "indicator--785c272d-515f-47db-b25a-5c9018943bae", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d06290-da2b-411a-ae0e-23a2588258c9", "sighting_of_ref": "indicator--974abc74-3a61-4357-9a08-6c828b778a45", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0971637f-ff92-43cf-8e11-c5ac09fe2239", "sighting_of_ref": "indicator--05ed32f7-c505-4ea8-a411-b850dc3bf4b7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4286cb6a-17b1-4eaf-b577-2d039a8f15d2", "sighting_of_ref": "indicator--631af33c-bbda-4aab-8dac-3c41a130d555", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1906026-7f87-4ae6-8da7-494b984a06c1", "sighting_of_ref": "indicator--09d18e7f-1416-4505-ab12-a0083fbae091", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52046ea8-93b5-4e99-b987-56804923a2d1", "sighting_of_ref": "indicator--e5ee0546-0a5f-431b-861f-00412b67754f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d0b379b-a93a-4d08-8e9b-92902b3ec986", "sighting_of_ref": "indicator--a5fbc66a-4678-4d45-bf70-9824f67795bc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c0f062-50ab-448e-9bfd-5ce480323af7", "sighting_of_ref": "indicator--fb44c031-d069-41b7-a64b-df41e92b7aff", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d6a064-142f-4a1d-81d5-6045cd9e8efb", "sighting_of_ref": "indicator--71e9e4e5-afde-4c46-ac62-5d7f715cd451", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b429983-b4ca-4bb1-bdc4-6dfcc6c70133", "sighting_of_ref": "indicator--fbcc9ff1-1f2c-4767-b809-54ecc90fcab8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b34b3bd5-331b-4582-9aad-a60158eb6b50", "sighting_of_ref": "indicator--881e5013-f806-4b9a-bc69-f024a0a4c781", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06d631f-b8c1-41a7-aea4-1a5af16c7537", "sighting_of_ref": "indicator--81119cb1-e4cf-4585-84d3-5b0ddcddcc42", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--245b1bbc-9054-4501-9557-f84093f8cab4", "sighting_of_ref": "indicator--2397b865-94f0-48c7-a1bb-79c02cb0e045", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4faeaaa-e449-4ad7-8114-2ecf9230968f", "sighting_of_ref": "indicator--bbeaa1a5-8b40-42d4-b9fc-f0b72ef15be1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5528ad6e-a873-446c-a0b4-658214c3ede7", "sighting_of_ref": "indicator--c11ae0f5-9ba8-45cc-934e-106927c3847c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b62f29-7876-4763-90d4-cfb8dc9cfb48", "sighting_of_ref": "indicator--c260fac6-afec-4585-9917-08cd6ee98bd4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42aebf21-9985-4409-b2c2-06a3bd9e8683", "sighting_of_ref": "indicator--733a7fd2-4ba1-4415-86f6-8766f97198eb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3295de-1e27-44be-bcf4-a38274f72bcb", "sighting_of_ref": "indicator--5ff16e01-6a79-49ac-a117-4da22e30a336", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0bd90a-544e-4c39-a296-e9fb38e6234b", "sighting_of_ref": "indicator--f0289399-f62b-4f1a-ad70-e5df70c326b7", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1a66db-dbfb-446e-8ea1-223b1307c35f", "sighting_of_ref": "indicator--99284915-962c-4c93-b94c-21efec9f36d3", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d61e94a-1d2c-4463-96e6-b436a442b5aa", "sighting_of_ref": "indicator--be826b58-26c9-494c-93c0-b76a4c7f1275", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a5cb8f-1339-4aa3-b5c9-3977cdda144e", "sighting_of_ref": "indicator--8681e74c-d79b-451c-8d89-05641a44a0ac", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a08586d-0189-497f-a9e8-1a1dee4c1784", "sighting_of_ref": "indicator--e0a4b66e-d989-498f-9d7b-40dca6e58d68", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d9a0f8-de34-4560-be60-06e0d84cdaf0", "sighting_of_ref": "indicator--b2fb7c3f-1ced-47e3-b514-1498033fa074", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c997be9-baa3-43fe-aa04-04b90293388f", "sighting_of_ref": "indicator--200871d7-56dd-4386-a2ca-dc9e1d33614b", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71296444-b66a-440c-82de-91dd33ce8e5b", "sighting_of_ref": "indicator--57751a5f-fd99-458a-adbe-25993fecf9cc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b17575a7-61e5-4a68-a3f1-888b2cc42bd4", "sighting_of_ref": "indicator--82432440-af30-4ea0-9957-b34e0316307e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--826f5e84-d5b6-4547-9ece-5817396146b2", "sighting_of_ref": "indicator--a04267b8-74c9-422b-9fe2-b7e244231b14", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b6d700-c7d8-4dcd-8f6c-ea4218a82660", "sighting_of_ref": "indicator--86a89ee2-8018-4831-9fbc-2b15f6462a41", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d94af473-23b8-4ae6-8d7f-0b88eb867d85", "sighting_of_ref": "indicator--2d81d58e-a166-4a42-a349-ade05982c9f5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e683d7f-48a0-491c-a21d-78d3ae0c279b", "sighting_of_ref": "indicator--dd9fac8a-a451-40bf-b068-c059f544b2b3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28699a6-b6ad-474e-8e54-256efb3a7b1a", "sighting_of_ref": "indicator--5c4ba52a-1680-4303-aacb-77f528733ea3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bcc2015-9cda-45f1-9a19-4965ec56d0f9", "sighting_of_ref": "indicator--b0cea5e0-abe8-43f3-8104-d7c89fe928b6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f6d020-0102-4fd1-a156-ea2e9c37671b", "sighting_of_ref": "indicator--42cba90a-5b7b-4f77-9601-26f634de9275", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a0228d8-8012-4ce7-9893-edb8c847f26e", "sighting_of_ref": "indicator--c0ed912d-0951-483f-8f5c-23e9fd8236d3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--454428e2-770f-4cef-99a4-da24b5a0adcd", "sighting_of_ref": "indicator--3cab95df-1ed4-4eda-8870-54ebe2e98177", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98329b91-daf3-4c55-9aca-251f44281874", "sighting_of_ref": "indicator--4fe5c1b1-36d2-477c-9a22-50c98e9f3d93", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d80b6ff-4017-496c-84ac-17eaa19dd44d", "sighting_of_ref": "indicator--3ae8ed87-dab1-4ac8-ab23-ec91dfa55e5b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e17435a-e75d-4877-8dde-d8b4b0e3ea76", "sighting_of_ref": "indicator--26411119-0500-4455-9fa6-78565cde54f8", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c65bac-fbd5-4e2c-9363-496b5884dd07", "sighting_of_ref": "indicator--26411119-0500-4455-9fa6-78565cde54f8", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f384ec-9b22-43c2-bd61-2ba2f48601cb", "sighting_of_ref": "indicator--26411119-0500-4455-9fa6-78565cde54f8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff237fc-f1d9-4ba9-87b5-424fb5ed850e", "sighting_of_ref": "indicator--26411119-0500-4455-9fa6-78565cde54f8", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b79fed-b31d-4e53-94d3-e57f83d24cec", "sighting_of_ref": "indicator--45b7615b-87a5-494e-8b43-bc8b871401e7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3d3b6b-526c-42a6-984f-89e4d3a3e989", "sighting_of_ref": "indicator--42d3d333-9522-4a35-b08c-81d04afafc93", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c8c0b42-e2e3-44e8-be86-d6def7f2028d", "sighting_of_ref": "indicator--42d3d333-9522-4a35-b08c-81d04afafc93", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b95074-5bee-49ad-8558-a84af53330a1", "sighting_of_ref": "indicator--f65a8daf-3f3f-4cf2-87ac-34d98ec6b015", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b199c893-accd-46e7-a428-22596bcdbdb0", "sighting_of_ref": "indicator--f87b5485-f3e8-42b6-9274-a9828604c151", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d94dbf1-05c1-43af-ab81-b8084df347cb", "sighting_of_ref": "indicator--bc7a63ae-d5fe-42e5-8059-f548860d8973", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6463b3-7a8f-4caf-83cb-f4b36539ac44", "sighting_of_ref": "indicator--69c667a2-ac59-40ec-866f-e2f9e11f2137", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2738c082-117c-4236-97ec-f8360608a70d", "sighting_of_ref": "indicator--9839698b-80ad-46c9-812a-4862ddae8c76", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7db2f9f-2236-421c-9867-2f5c441ab43f", "sighting_of_ref": "indicator--8ad4409d-afee-4356-9be7-e3e79da8e32f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a14311-085e-4d53-96c1-15cf7a984ff7", "sighting_of_ref": "indicator--9bcf8ca0-8f19-49b4-9e3c-e4ca01df2d39", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5ba48f-8872-482a-8eb4-504401f7e41b", "sighting_of_ref": "indicator--17424fde-e582-4816-92be-c3d498573a03", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77c3c21-96de-4cad-a9db-e67fb3516465", "sighting_of_ref": "indicator--3505f61b-b1bd-44a6-867c-06cd19aad356", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8620300-e057-4442-8cc1-bc62a51db2c6", "sighting_of_ref": "indicator--0b77a1ed-655b-4a3b-8e48-1ed0222038c0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b65a43f-213c-41f5-8441-ab11a5239f9c", "sighting_of_ref": "indicator--5189fd26-0b99-4b99-9243-53f1f9e43dea", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e04ab6-2efe-40f9-8bc6-b11a1cc30e0f", "sighting_of_ref": "indicator--c1f0f79c-fa5b-4ba7-a0ba-99da30c8c715", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c18a46-0ab4-4c5a-8a42-0cb48e98adf6", "sighting_of_ref": "indicator--b458f8ed-360b-4bd1-a27b-850e7a5e365b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8d4262-c41a-4eed-a4d4-1ecd4f238e8d", "sighting_of_ref": "indicator--57e3d416-d2f6-4725-8b49-cae170e0a30f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0405cbe9-06cb-4504-b70b-541abe8652e9", "sighting_of_ref": "indicator--11627521-3ab7-408e-805d-6978710e2423", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf77da5-320b-4652-95bb-0a763c8d06ec", "sighting_of_ref": "indicator--76392fc9-5aca-4592-943f-af77be4aa88a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8847ec33-def5-4366-9554-2b6d10b25198", "sighting_of_ref": "indicator--de64e503-7e27-4bd5-bce1-84424372784e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2f3943-fa6b-4a71-8862-3ef9283567df", "sighting_of_ref": "indicator--d1d76920-3658-4d78-a1a9-68604552f588", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb7d4d7-4579-436c-9dfb-4396c6924ec2", "sighting_of_ref": "indicator--d5e0d55f-1946-4f2f-890f-9abb49024a58", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea8601cb-95e7-433c-832b-015df91d79a0", "sighting_of_ref": "indicator--0d95c2f5-59ee-4692-a19e-29194f926da0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbeba1f-2956-462f-8808-816c6bd875a4", "sighting_of_ref": "indicator--d448b83f-5fc9-4174-908c-c5df91263349", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b94c6c-2f47-48cb-9922-3f2e1e6e4636", "sighting_of_ref": "indicator--b776b8ad-5b35-4f9f-b49b-419cf789188a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8539a069-3439-4901-b979-d977a4b07f2c", "sighting_of_ref": "indicator--b6e1e896-5898-4b0d-b719-8eb14128e23f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f6d579c-602c-4d0b-81f4-bbef4d4d354d", "sighting_of_ref": "indicator--1c99dea8-2c38-4bda-8cf6-e0723dec6d9e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2471f9b-3c79-4eb6-94da-3cd3ae374730", "sighting_of_ref": "indicator--7cae1df6-dc59-4717-8982-c14922ee9475", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e42aab53-116f-4365-89d6-dcc4bfa3b73a", "sighting_of_ref": "indicator--7261da98-9b52-4d43-b5a3-ddc478ba3fc9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b264c360-c3ff-419c-a362-02d7fe779055", "sighting_of_ref": "indicator--2c1b9e07-b785-43b0-96bb-15b972fae93f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c03e7e2-cb78-411d-b823-6a7e840d9f6c", "sighting_of_ref": "indicator--1c3724f4-6454-4409-81bd-e45bfb3556c7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed11352f-610c-4d2f-8229-15a4881a848f", "sighting_of_ref": "indicator--f69dbf0c-e655-46ba-bce9-b70224779d72", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2952e306-fd0a-48d5-86e0-9c43908b14b9", "sighting_of_ref": "indicator--996ce9df-aa85-4306-9cea-3ec39c88f5b4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648c6218-9efe-41ec-8251-be63de71f88b", "sighting_of_ref": "indicator--bdaef4bf-2ae5-4622-8eff-ebaca8c9b07a", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90f167f-725f-4b15-9757-f72349be7615", "sighting_of_ref": "indicator--1432fc93-62aa-462f-ba42-30c0843c20b9", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe3a296-6998-471a-a97b-9616f5eb3606", "sighting_of_ref": "indicator--296b395a-11ff-456f-88bd-8d4fa50be612", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39bc2ab-51f0-4008-a1fb-06d476751725", "sighting_of_ref": "indicator--a8249ee1-7f7b-4c57-8572-e4321b3bb887", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3208a3-7074-47fd-8b6f-6f9dab079cd9", "sighting_of_ref": "indicator--659290bf-0734-483e-ad0a-8c3c3d9869ef", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dcf5cd0-af3e-43d2-a7b4-d37ff374aa63", "sighting_of_ref": "indicator--31b40d89-c973-4ed7-ab55-59d99fdf9eeb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ed0998-2595-4111-91eb-6f1f6c728587", "sighting_of_ref": "indicator--74ba8189-c56e-4a7d-a304-55067b552589", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d48d7c5-c787-4d6e-84c2-b18799dd9b21", "sighting_of_ref": "indicator--ebcca944-276e-41a7-9790-619e00c29bc4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f0e5db-b7f1-41c2-8e69-45fc394401f0", "sighting_of_ref": "indicator--cb5513a2-b863-439f-8da7-eea09ae8dcc7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce9e514-9851-4e0c-a2b2-73846c959a57", "sighting_of_ref": "indicator--17c34fd9-5b1a-47c0-a382-1d0b51c760c9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cb585e8-63ae-41e9-b1aa-7480e46326c2", "sighting_of_ref": "indicator--3f556495-347c-452a-ad62-4455ffd43f2f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d9dad0-f9bb-4cd7-a0b2-02c9b643e7d0", "sighting_of_ref": "indicator--68bb166e-2c35-47d7-9ba6-35de2af6c827", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3fa8565-5d33-4687-b1bc-110db67974b7", "sighting_of_ref": "indicator--7cd52584-c955-4060-a1ee-1a608e394471", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff33e25-b503-4963-8a8e-10ed8afe538f", "sighting_of_ref": "indicator--47080c6d-cd73-4c16-bd95-12e06cb1d98a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e96d5a39-a0dd-4fc6-ab8b-27d7dbab99a2", "sighting_of_ref": "indicator--2db3239b-90fb-4e94-9df0-510b8bf7a1ef", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd37745-5912-4282-bebd-3865e32df8bb", "sighting_of_ref": "indicator--057208a7-9869-422e-a14a-4aa3d6423741", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--babdf35c-8805-4f5c-a0c8-171d918f7829", "sighting_of_ref": "indicator--057208a7-9869-422e-a14a-4aa3d6423741", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b74acbc1-3dba-49f4-a907-4b9117574288", "sighting_of_ref": "indicator--8db07760-6f8e-4151-8d8b-66b37431ff33", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae3aa3f-3723-4374-83cb-e97aebc3d5aa", "sighting_of_ref": "indicator--4e7fa56e-8c76-4bc5-b7bc-ab1a645a1e2b", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba37ed9-d92a-4b41-9e0f-d837d81bb08e", "sighting_of_ref": "indicator--4175d518-332c-48ab-92b5-f432e77d32af", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a293bb-f4f6-40bb-8e5e-825be349797c", "sighting_of_ref": "indicator--aa809fd0-d1d9-49a8-8253-29d37ac4e4f9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--908fb3b4-9bf5-464e-ba1f-c58a2763c115", "sighting_of_ref": "indicator--5edefddd-d00f-4734-b269-49100ef7fd29", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f953d4-095a-4865-b2e4-bf8c87e68d54", "sighting_of_ref": "indicator--9bcf2edf-9e82-4919-a61c-9026ba4c8eae", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c383514-b50f-4ea0-9093-e71d560fab2c", "sighting_of_ref": "indicator--7a6ff8e1-724c-46e9-9b6b-e169e0debfed", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111ad295-f56f-41ae-b15a-0b8fb1b532ae", "sighting_of_ref": "indicator--69e720ac-80a9-4250-921e-a505304d0cb3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d04cd3-71fd-4be4-a29e-4ec8ff811691", "sighting_of_ref": "indicator--9b749163-fd87-4a52-9b6e-bc82a369f6fc", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc49213-4dac-404e-ad6d-4dea047a2b6c", "sighting_of_ref": "indicator--f5db9e6d-03ac-4541-8e14-25aabe9fd3d9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67cc2e33-7071-4b12-b9b1-aa646c1a2508", "sighting_of_ref": "indicator--c9c504da-bd41-4f48-846e-69d1cf6c49a9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b600a73a-c12c-4e6d-b187-0e081bc5ec3d", "sighting_of_ref": "indicator--a224928a-4942-4d35-a56c-afd2d7c22397", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b29595-f62d-42e0-9bea-49217a90a1e6", "sighting_of_ref": "indicator--e189312c-d8b6-46c9-8cb3-248596cbbacb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f13ea3a1-f433-4f23-8026-3e77b6e5a0c0", "sighting_of_ref": "indicator--88c42256-0d1e-4e8b-80d7-1457f6e603bd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f144726f-cb2e-408e-a7e4-7188364bb4cf", "sighting_of_ref": "indicator--41ad64d3-de9e-439f-b3f6-e69c58711622", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04900dd-0fc9-4d2a-bf66-fa81cf8c1616", "sighting_of_ref": "indicator--0fb82420-6721-4a24-b97a-0e84e0b97234", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e6ee6a-a959-4388-af45-12b0432aa3ea", "sighting_of_ref": "indicator--b711adda-06ae-42ed-b1e1-58f6d9413a50", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--472879d3-2043-45dd-a324-9e6df5eb1822", "sighting_of_ref": "indicator--a5f2edbd-62bf-49a7-a907-9c7061659adc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91b389f-1fb5-4741-b73e-356760f2462d", "sighting_of_ref": "indicator--f157d077-ed40-4aff-9a6b-789864ebd01f", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6c15e9-6dfd-49cd-a01b-53bab1f4b290", "sighting_of_ref": "indicator--57cc88c5-c4e2-4f07-a50e-d98930cc418b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6b538c-0695-4200-8cc1-fc8b413ed8f3", "sighting_of_ref": "indicator--3b609a63-2566-44dc-b860-1bd343c0fa52", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cbb20dd-3a32-4242-9c31-a0cbae967e06", "sighting_of_ref": "indicator--473c9aa8-8de0-43ea-8077-7e6a3ae7a1be", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2396428a-2c2e-4c10-b576-4b774efaf1b0", "sighting_of_ref": "indicator--f3cb653e-2bb1-4fd7-9671-c8ef02b87635", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20044a57-4851-407f-ad5d-126cd8ff750f", "sighting_of_ref": "indicator--27462914-debe-4f85-9210-4b8891ea0b0a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--096662ad-7e5c-4b8e-9d6c-851a86952699", "sighting_of_ref": "indicator--4b573f4d-2a42-4fe4-8298-f57852f9fec4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6861ab7c-c072-4926-b11d-93e6f3a6ea34", "sighting_of_ref": "indicator--efa2a4da-f4ab-4951-9bb8-22a1e5d130e4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fdecd9c-cf0a-40aa-a027-48b9645939c7", "sighting_of_ref": "indicator--38dd25c4-23e6-48aa-a4c1-78b7d341982b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b9aef28-ecf8-4128-914e-7f63cf025e2b", "sighting_of_ref": "indicator--663050ce-6a9b-4879-8214-8e591c208c5f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec94b39-b500-4902-a86b-6cf0ca6aa08e", "sighting_of_ref": "indicator--9aa2c6b7-6417-4329-8d10-30896fd70a14", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c1fa0c-2a1d-42bc-8fa2-86a40ee762ff", "sighting_of_ref": "indicator--1c839fc2-9472-4507-9889-517489bb57bf", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--312284a7-8849-42da-9161-df91363c543e", "sighting_of_ref": "indicator--7bbdcb49-539e-4e31-a9e8-2ea51400048c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5c39bf-d57a-4f82-b7cd-c53b80619b4d", "sighting_of_ref": "indicator--4410a8da-9dbd-4eb1-91bf-30ba7f61d918", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3268462-c19c-4923-88cd-597ea691e1aa", "sighting_of_ref": "indicator--ed3f9405-a6ed-4f5b-8b41-3d13255d89fd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad8553f8-7ba8-444a-9da2-9a9a3b8fcf17", "sighting_of_ref": "indicator--53a59f21-a504-43ad-9739-97de8c8622ed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c9dbdf-df2a-46e5-b341-b6b3005884b7", "sighting_of_ref": "indicator--fa712e09-8fbc-43bd-a0be-ff19caba7a8e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee382c2-8c3c-4f4f-a3f5-5e783716f547", "sighting_of_ref": "indicator--f1d20d17-bd13-4749-8254-f8d0fe7da0e0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca9000c-0b10-412b-8d9e-319921cbd93f", "sighting_of_ref": "indicator--72734cbc-d3d3-483d-9fcb-553f3b9afe2b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e477c9-ac98-4f1a-8227-2ce5def883b9", "sighting_of_ref": "indicator--180511e8-e5be-43b1-b9f7-43ccee443712", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f2959c-9fe1-4631-87b9-478bfcb566fc", "sighting_of_ref": "indicator--3cde4a64-1ce8-4a33-800a-49c1ffa40d53", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61532a51-75c3-4a14-bc2d-37314f5ff070", "sighting_of_ref": "indicator--01e0c9fe-fbca-4781-bca0-6a47335ea4fb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838e176a-3413-46ca-a570-9eae4a7bf27f", "sighting_of_ref": "indicator--62053871-a5d1-484b-9546-63a677c5cd99", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f161699a-269c-4863-b00c-6fe9be273b27", "sighting_of_ref": "indicator--62053871-a5d1-484b-9546-63a677c5cd99", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce33ba7-2374-494c-8ebf-12bbb4ae118c", "sighting_of_ref": "indicator--4a654657-f308-4879-8970-084465f341c3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5609991-7ff7-4077-9ce7-cf2dfa2e712b", "sighting_of_ref": "indicator--0f9e5eca-fe95-400b-9761-0f61677322ff", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b797aaa5-9170-4c29-a5a3-045dcf137833", "sighting_of_ref": "indicator--578a53eb-a28b-41d9-98a6-8e97f69a0192", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab945ed-0772-4ddb-bda0-81f148c52ffc", "sighting_of_ref": "indicator--013d836d-b9d8-410d-86e4-e96489306dcd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440f0953-497d-4367-9f92-edcdda2eae9c", "sighting_of_ref": "indicator--0bfac568-f3a1-453d-be1b-5c3c8e54d163", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08555569-c23c-4cc3-99bc-80baabbb43c5", "sighting_of_ref": "indicator--4f747866-179f-4946-850d-894c948c6b6c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc4b1a9-8a6d-49fb-a759-6aa6f22cb418", "sighting_of_ref": "indicator--6423b42c-6c8a-4753-9f1a-4cb2f31ab96d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b53940-8a23-464a-abe3-2a7440ff3bd7", "sighting_of_ref": "indicator--6f33ed13-dbb1-420e-b085-4212bc01f99d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4beae197-f79e-4cb7-ad78-19a3a0fa7aee", "sighting_of_ref": "indicator--0efef3ad-534f-44b9-af04-f0a5641241a4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7caad84a-05f1-4c04-9dd0-1ab66208b323", "sighting_of_ref": "indicator--5f617e2b-07a6-45ae-be37-ef899db8a0ea", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e0f3c4-b434-465f-bab9-d99713cd4b89", "sighting_of_ref": "indicator--043a88ee-8e14-492c-97e3-bb1e080d78a4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f06afaf-f8fc-4173-83ac-fbea8642a195", "sighting_of_ref": "indicator--21e40b2a-a217-4f0f-81cc-be312c2a6bfe", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a58d6b-c337-4365-b352-3cbc406a7f1d", "sighting_of_ref": "indicator--a2b59039-36c7-4717-a3b6-e149e304d17d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5482082-4a61-4ce7-82a1-9f13ff633286", "sighting_of_ref": "indicator--54ef9d7c-e01c-4023-8608-85e00bdaa031", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b526d0fa-0dfd-45fa-8703-9e7366a7e3ec", "sighting_of_ref": "indicator--60b39506-c571-4085-90bd-795b127d34a7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f4309a-1843-4067-8264-26e046a56952", "sighting_of_ref": "indicator--773f4157-c900-4814-ab3c-0f96ab31c968", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b7ad2a-aa62-47d3-ba70-944f08fbd1d2", "sighting_of_ref": "indicator--a973ff4c-7d8a-45be-a439-9cc0e37fb163", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c70ae56-a195-475d-b63a-eca8ec2dcd0e", "sighting_of_ref": "indicator--0b3b225e-6368-4ecb-bd60-b83e8189e9f0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b98106-0eba-4ed7-95a5-0b679f328c38", "sighting_of_ref": "indicator--82c12583-75f2-4800-b1aa-772837773cd0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--951122ff-133e-4144-b468-e5db38bd199a", "sighting_of_ref": "indicator--cdab372d-fc0e-4be5-a7c5-ced0984b9ec7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc8a8ac0-a8c0-48c7-8e8c-68cd7ba9f376", "sighting_of_ref": "indicator--6e624451-5428-486e-abc9-9fb0105a6b91", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a50e3fd-f64f-463b-98c3-bae5b4c4e953", "sighting_of_ref": "indicator--56fcf514-25a0-4c0f-a202-8e9c2a3275a9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d47335d1-c3d3-44c3-80de-fcb8203de8df", "sighting_of_ref": "indicator--06caa409-5211-46a6-ae59-8ee3d78e7daf", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fccfff84-f202-41f1-8ac1-ad064f0ad5e7", "sighting_of_ref": "indicator--d79c4a83-3483-471c-b0ad-d50c5bdbd778", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50da0370-1758-4652-bf14-80bdd37ca1d1", "sighting_of_ref": "indicator--91ad48dd-a90b-4034-bd5e-606fce747e28", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f491ef-0e3a-43e2-b1c1-122284c27e8d", "sighting_of_ref": "indicator--a6ab6c9d-d623-4d77-8b2b-37862667cd79", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8354b28-26bb-48b4-9a84-7e281a6f52b5", "sighting_of_ref": "indicator--50cc5f97-41f7-4c91-9dc4-28d5f50f0bb3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b227a02c-751a-4c99-bf88-e0ce349d6f24", "sighting_of_ref": "indicator--a92cb554-de9c-4854-9629-66a10fd0d580", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2daf9f0-9ae8-41a0-ade4-debbcc8a5f83", "sighting_of_ref": "indicator--069a3e67-e06e-4ce3-a4a1-0afda0d0c78f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa22f6c0-4e29-4610-8339-92be3d0f75a8", "sighting_of_ref": "indicator--c11838e7-dd5d-4bb2-873b-4945225798ec", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe0a1253-272f-4d2e-9336-8be4e5cb8db0", "sighting_of_ref": "indicator--0229058d-884b-48ea-a10d-325034de19af", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe64af0-6a63-4095-96ff-9657a2fb8072", "sighting_of_ref": "indicator--cd8f012f-bd87-409e-b291-c329041db9c3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b608a1-82d3-446c-a333-dd32ccd58025", "sighting_of_ref": "indicator--9bb86405-9a27-4a83-a195-d4dd0d89c3c1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0787a6e-f27e-409e-8e50-fd8cbeef33f5", "sighting_of_ref": "indicator--fcbc2adb-4d7d-4023-ac29-015393742ddc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f34d7c-4a69-4d81-9267-a06ca6245d15", "sighting_of_ref": "indicator--7a15444d-87cd-4c0e-a1a0-b6ddb276d477", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75473017-d44f-4ac5-808e-8b1adfd9e180", "sighting_of_ref": "indicator--3352925b-a082-43af-8439-f5e082fe5495", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede8b316-3844-4084-8d4d-7f3100d3b783", "sighting_of_ref": "indicator--4e58599b-071e-478c-bfb1-ed5f71df7112", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c745b4-b54f-44af-a410-7e57308a3373", "sighting_of_ref": "indicator--1cb0a668-c37c-4e58-a67b-340f719e403e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8323fc5-3a20-49cf-9dd1-684fbab0f137", "sighting_of_ref": "indicator--1f9385a8-18ef-4d61-986f-959ea54fcfcb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf2c0ef-ae25-475a-ba58-b19dc0ca8af1", "sighting_of_ref": "indicator--d9551d4d-5754-435e-8086-9a7961ae16ca", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970e5aad-71c6-436d-9a47-8eb2125d8aaa", "sighting_of_ref": "indicator--e1d92b13-89c8-4a86-909b-444178077da3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b952802-ab78-4620-80dd-1da2d4c2b66f", "sighting_of_ref": "indicator--28a41dc0-264a-4c1c-aeee-d7a9ff72f7ae", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37fe69e-51bd-4f18-9bd9-b43384b2d855", "sighting_of_ref": "indicator--3bb53f95-cf89-4512-964a-5f0f90cd801c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527af60d-94c5-4209-a0b8-6f943ea37e09", "sighting_of_ref": "indicator--b1bb7a74-35fc-462a-995d-1674d6a2ed30", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3e0ddb-3ff0-4772-8306-e6dfb0a54296", "sighting_of_ref": "indicator--781445d1-e2cc-4d53-a42d-56a11624bd08", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f69cc9e3-a709-4fdb-871a-ee3e35e1f046", "sighting_of_ref": "indicator--47333ca1-5250-4237-85fd-303fa336bbfb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f790990-f090-45a4-83d5-3daedef51faf", "sighting_of_ref": "indicator--55160d40-4be3-4eea-8dd3-b4098b3afc41", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb82e9a5-1dd6-4b8b-8dae-0b11f53358b8", "sighting_of_ref": "indicator--492eeb92-ee9e-4b04-96b0-3624f77d1915", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38531217-1c82-4a93-aa0e-2c1daea1b7f3", "sighting_of_ref": "indicator--f2e37216-638b-4137-b4f2-c68dc1f24c4d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab9ff4f-4b33-4d45-9cad-9290f4ee98d8", "sighting_of_ref": "indicator--2e398ce2-fe84-4099-b533-797a5944c44e", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31af30ee-bf70-43ec-b1eb-bc3c76976317", "sighting_of_ref": "indicator--2e398ce2-fe84-4099-b533-797a5944c44e", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527e6f11-03ad-4883-a5ea-efaca5e3f432", "sighting_of_ref": "indicator--2e398ce2-fe84-4099-b533-797a5944c44e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe7768b-05cf-47e9-9524-9c7e2b0d4b92", "sighting_of_ref": "indicator--2e398ce2-fe84-4099-b533-797a5944c44e", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--620a1fe7-36bb-4047-a4a0-065e6aa75061", "sighting_of_ref": "indicator--7d4b68ae-1942-4145-9ed6-e8fbac0cf9bb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902b20c9-bd12-42b7-9cba-e468d2300bf0", "sighting_of_ref": "indicator--abfacd80-bbee-4d93-b498-fb71071609ab", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9754da46-5ce7-429d-83c7-4e230e9deb7d", "sighting_of_ref": "indicator--ad40dfd5-a041-48b1-8607-16442bf65f8c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7081b7e1-effb-4c2c-aad2-3ee0c8787224", "sighting_of_ref": "indicator--6f5e5f43-329a-4b50-a123-d7e91098d25b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc73348-4242-46e0-92b0-aea867aaf70d", "sighting_of_ref": "indicator--d21993ee-b8c2-4377-a61e-708e0ee78900", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6650f161-89e4-4936-8f7c-b66e0482d669", "sighting_of_ref": "indicator--54f31cad-5d51-4456-bb72-2c1097d981e2", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5606982f-8939-46e9-a494-d29d8bbb52b8", "sighting_of_ref": "indicator--54f31cad-5d51-4456-bb72-2c1097d981e2", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d36b41f-e351-4944-9a1b-a60d1e949ad0", "sighting_of_ref": "indicator--ab5a4cde-9e22-4366-941b-41894a8b742f", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e4d087a-8d8d-40c4-85c1-07f7594f0724", "sighting_of_ref": "indicator--ec69daf2-5049-4fe9-b6b9-02fbb7be4329", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e40a32-0f65-4f76-ac02-9024692b49d7", "sighting_of_ref": "indicator--bb3edb6e-b87e-4e23-8479-b3743bc04465", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d5eeda-84b6-458f-8131-7964ba0cca3b", "sighting_of_ref": "indicator--3cb46110-0de3-44fb-a8e9-b79230e9d676", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0444000-ffe0-41ce-9383-de8f15cdc878", "sighting_of_ref": "indicator--7c90aa96-c54a-4002-b6c8-1e5f63ac4dd8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a36b1f63-3eed-4b45-a385-d75e6b12643f", "sighting_of_ref": "indicator--33520bea-1b18-40ba-8235-ff9e4b2ea585", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53767afa-510b-4f69-9562-e37a31ca473a", "sighting_of_ref": "indicator--7e12a107-aac9-4911-9cef-defa203a72d5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7876c52-4b3a-409e-b658-45d21aaa9fc6", "sighting_of_ref": "indicator--2c73613e-da03-4617-8a32-a1ec9f5dafcd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7531165-de06-41e2-9322-1737bce26088", "sighting_of_ref": "indicator--9e03fc37-673e-42bf-a777-e99f15b0a106", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66f54d3-16f7-4643-bba6-5300c7b4d000", "sighting_of_ref": "indicator--02d7b519-5ff5-4b83-8b67-9ff6263f9e56", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d2acb9a-4d34-4533-90f1-bbf7673db891", "sighting_of_ref": "indicator--01ff9050-63c8-48f0-8464-6f3d458e2931", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c089b802-f984-4c22-a64f-987b1ef39e74", "sighting_of_ref": "indicator--88aaa2d6-79b5-4bcc-94db-d73cc6d7cf48", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90940da8-ef17-4484-b2b3-457a25e1dc9f", "sighting_of_ref": "indicator--ece02f25-44ec-4a79-96ea-02fa97ee84d4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65f1a452-e6ec-4460-b38b-90180f84a21b", "sighting_of_ref": "indicator--f5b2c186-626c-47cc-8d6e-4284c437889a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1dac74-f89d-4fff-b908-7d419ff50e1e", "sighting_of_ref": "indicator--ed2bc39c-18c1-454c-8dd0-509a9f063fa4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e403b5fe-1498-42bf-830f-faec3966f041", "sighting_of_ref": "indicator--e2fe9339-c1b6-4e51-a84d-4fd6ba3d7765", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b3b78e-5c17-4f78-9842-c5910b4f2a92", "sighting_of_ref": "indicator--a20bf07a-c6da-4295-bc90-5b298a9ae1bc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb9e259a-799f-4039-885b-93e132940acc", "sighting_of_ref": "indicator--5c718c34-f085-430e-b409-6867409d2335", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f692fa-bc71-4821-ba56-3a2ebd7a40a6", "sighting_of_ref": "indicator--05748119-cacb-4cf8-840c-72d5ae078295", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36001692-6621-4291-80f9-4a0f03cdc53d", "sighting_of_ref": "indicator--201098e3-57bb-43ea-9908-72f787507650", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7bc619b-0ddc-4ed4-bd08-b94a71e8baf4", "sighting_of_ref": "indicator--b393818b-915b-4094-b4bc-e66fda335491", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa077953-b9ce-47fb-9593-e843213fd161", "sighting_of_ref": "indicator--14bed731-6be5-4f02-8d21-d01feb89cb60", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a99cd6-c5c5-47ef-ace8-9cc9f9bfa5f8", "sighting_of_ref": "indicator--7b5711f6-6cdd-415f-99ca-2f3acb376dcb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d659fa-1905-4fc7-966e-d73ddd4583b5", "sighting_of_ref": "indicator--0640081b-fa23-4612-9608-e610ac60d1ce", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69124ae1-543e-415d-bf4a-4ec4fa72fc33", "sighting_of_ref": "indicator--f222934e-6846-4217-b7d1-00828d8138af", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d05767-c0c3-42a4-8553-430541d3a908", "sighting_of_ref": "indicator--98dbd656-aef3-475c-8eff-b23d5acd6589", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0fb9df4-abb2-4b84-ae73-27524e7ff6da", "sighting_of_ref": "indicator--9f30f49f-ea32-4373-aa86-fcf329ae8761", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6277752-3c97-41e0-ad6d-e4f30c089666", "sighting_of_ref": "indicator--33222385-0c46-48b1-92ca-6aa73f93288b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ac4af6-6977-41ea-99a1-18499e757d11", "sighting_of_ref": "indicator--7cd850de-51ab-4a82-ae3b-96725f302440", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c11a4bb1-5183-4e29-91ca-8888b93e0a33", "sighting_of_ref": "indicator--bf247c14-ef8c-4b62-8554-f35734296004", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d034564-b008-46a4-88c4-051844acce51", "sighting_of_ref": "indicator--1e04ddaa-9862-422a-b2e8-a979a17ff54f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03affe9-e212-420c-9fc2-a26198823e1d", "sighting_of_ref": "indicator--03065a4c-7afb-46fe-8df2-9f1e4e59ceb6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e742aaf-be9a-4ed1-a819-93af379e3284", "sighting_of_ref": "indicator--63e742b7-de30-4140-af56-5da3c8278d6c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31aba158-1c18-43dd-9dac-7d0b9336ec04", "sighting_of_ref": "indicator--4ac1a7b1-2a26-4075-967b-9cddc5e72f2b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62073e62-c265-476f-b01d-f69d1220477b", "sighting_of_ref": "indicator--4723993b-3a03-4ffc-be16-c08ad3617f65", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b910a8fc-dbfe-41e5-a11f-f63d3d74ae52", "sighting_of_ref": "indicator--34da31e3-7218-413b-8a6b-ec2723d6a6c0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--277abde8-cc40-4d7f-8fd7-b6176b44c866", "sighting_of_ref": "indicator--8aaf1b53-e240-47f6-a3ec-93c434220044", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7150bdc-8df2-4794-8fe4-bb031dd0e2ff", "sighting_of_ref": "indicator--810571b4-b343-4aab-880b-a6b8c2026a83", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f273dc4-4693-4c67-9662-a2ccc79d7394", "sighting_of_ref": "indicator--67d20e23-7513-425a-bcbf-3822b17fc73e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0c495b-1d05-4c47-a45d-b2eb146982b0", "sighting_of_ref": "indicator--58018f75-d9bd-4633-9548-bec4e857456e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45ac067-c675-4ace-8ab9-d65de722aadf", "sighting_of_ref": "indicator--c5537561-979a-4e9b-a547-59d43e7caba3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57df325f-d141-46b9-b6eb-9b920d01dd6a", "sighting_of_ref": "indicator--16f998e6-e86c-4ffe-bd4a-f6859a5d03b5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a19ca0f-7783-4bca-b32e-9c717ea0c684", "sighting_of_ref": "indicator--79eda129-79e0-44c2-bf92-7ecea487d3c7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f63a68-3e19-4b45-9a16-d80c98a1856e", "sighting_of_ref": "indicator--d097c7b0-515c-43ef-8eae-13e4cffb5ea9", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d42a105-6236-46c3-8858-42caa27b800b", "sighting_of_ref": "indicator--9f6324db-4526-4565-8691-8d71faf81dd4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd75666-d6a7-4358-93c2-3a2fbb5059d1", "sighting_of_ref": "indicator--42565326-55d4-4f3c-94e9-2193d3719aec", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b879024-6476-4ca6-962d-86e7d4d1238b", "sighting_of_ref": "indicator--0408ce13-67bb-46b9-8447-6d717790b7bc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f29492-c41f-4329-b2f1-0dba01fac8a3", "sighting_of_ref": "indicator--9a132aa4-c9cb-47f5-a1a5-ac6ad385e695", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--230b566b-d52b-4d23-8ffd-3834f340e258", "sighting_of_ref": "indicator--41591b24-2e88-455b-920d-59e5d2685c0a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de12b908-cb2a-43a9-a9f5-87fee9e48fec", "sighting_of_ref": "indicator--bc5885de-0121-4e0e-8576-19d5a4024867", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2508c3-1070-435a-9423-cc7725a6eb10", "sighting_of_ref": "indicator--e6277b29-1e32-45e7-96b0-f53391bb4349", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc37cd3-c55e-4d30-b014-3758bb6878d8", "sighting_of_ref": "indicator--6d47192b-9684-4b43-a571-4c4aaace69f2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7219ef8-c41c-4780-a758-e0f991482bcf", "sighting_of_ref": "indicator--6a02de2c-f851-4f4f-b96b-fac6c0630697", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb95e1b-41eb-426c-a0b3-5a229c95063e", "sighting_of_ref": "indicator--1b789b70-9f6f-4ff4-81f7-f51b6229c423", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f00533c-fe56-4e6b-9498-265f81d89316", "sighting_of_ref": "indicator--20a62fd9-800f-4241-aa9e-b0b1c5a3d8e3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d17de31-3998-4ac3-96e6-d0d2d2a0360d", "sighting_of_ref": "indicator--34da07f0-5af0-4fd0-8986-8cd8e9b9627b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b991253f-eeb4-4d7f-a0c7-bbae5387a986", "sighting_of_ref": "indicator--ee04378a-8a5a-4fe3-96fb-3b71a16e96da", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ecbc6a-3334-42a5-8055-a5016cec0fac", "sighting_of_ref": "indicator--b9cd750d-ce61-4b8c-bad4-c07031a3a370", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ebcfaf9-0422-478f-b6fb-e03b7a5fcee3", "sighting_of_ref": "indicator--145ca21f-33b9-4c65-a212-6040c42c39e8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaaef0a2-59c5-492c-b3c9-3550b26e4a02", "sighting_of_ref": "indicator--d0f82832-575e-45a8-8062-2e7255907686", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a52c26-8c6f-4595-b720-20d748919066", "sighting_of_ref": "indicator--2ee190b6-d681-4efb-a8f5-ff778e8d1e5e", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167cd680-513a-4cbd-8a3d-9e52cb942f00", "sighting_of_ref": "indicator--25b7684a-9edd-433e-9e7b-469fddd92f5c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5085896d-3c1a-4b56-ad15-bc05d7da5422", "sighting_of_ref": "indicator--f9cd933a-a9cc-4841-aac8-53db6a30a6c7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d86eb23-a3bf-473b-ac65-b8d1fa12f892", "sighting_of_ref": "indicator--52e70bc9-3e38-42bc-9659-1a9ad5bc88ad", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60865ca-9c92-4b8b-99d1-f8ad0f6e3451", "sighting_of_ref": "indicator--9c521c58-1415-463e-a56e-de6b30f929ed", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca1f1d5-c908-47cf-b493-9feaec1fe988", "sighting_of_ref": "indicator--f28ebf13-c988-48f7-8109-b263c0beaa68", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee2eec40-63e2-4be3-bb1c-ab4bd84faf8e", "sighting_of_ref": "indicator--486b26b3-3f12-4a8b-9b96-4aebd6335bc8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f28955f-8728-4879-a439-313c47d323eb", "sighting_of_ref": "indicator--82921abb-bbaf-42de-acb3-c35e1259c616", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1631de2-f865-4d7a-bdfd-fae9614f9a06", "sighting_of_ref": "indicator--6074e327-52e1-4665-888c-c425ad8aad66", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896c4399-feef-495f-9738-beefb8b1f78b", "sighting_of_ref": "indicator--fd993387-3cff-416e-9fd9-2f3a4f40aa86", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc4963c-c472-4370-b21e-4a9e26351666", "sighting_of_ref": "indicator--aee6581e-7a07-4134-a757-eeff9b88c945", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62243d44-9d7e-41e1-bd17-d0dd59b97d99", "sighting_of_ref": "indicator--86c1ba8b-745f-458c-90ea-12abfbd66179", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3728eee3-a3de-46bf-aee0-5689d5838da4", "sighting_of_ref": "indicator--0f9644e1-b2b6-45de-807f-e2b7fdda87b7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18bd183e-9881-421a-8987-71c04de6a7ee", "sighting_of_ref": "indicator--c6c9ad81-f208-4a30-b3cb-af5868055cad", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1633e2f6-066e-4d52-8175-bc212699d767", "sighting_of_ref": "indicator--636102e7-0971-4cda-8b87-58496c55547d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f00b7df0-7f7c-40e8-b6b9-02e9bc2848bb", "sighting_of_ref": "indicator--c23a9b68-ae43-4c85-b2ac-bb978ae799a9", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63250da-7284-4b27-a57b-1e7dff7bfcd7", "sighting_of_ref": "indicator--45b85859-5804-489d-adbd-c7a986bbcf33", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53267ae3-9ec3-4493-ac9d-138641e61fb5", "sighting_of_ref": "indicator--9fc9d062-0abd-4c60-a393-bffb6cbec1ed", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c464aca5-16f8-4b79-965f-32182ccd4740", "sighting_of_ref": "indicator--e023b761-bc0c-4399-bfc8-0534e7b236da", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d22fae-21f4-4df2-a38a-ce57d69857ea", "sighting_of_ref": "indicator--3ce14291-769d-40ad-8f0d-2365e1601bcd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a094fd5-7c15-481a-a820-45fc0120cbcc", "sighting_of_ref": "indicator--59f0065f-4ff2-4af0-aae0-844b7e414294", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ea1823-9742-40b3-ae68-0eef4e08d00f", "sighting_of_ref": "indicator--372468f9-0089-433e-9e0b-2ead3bdb938d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1896a88-c799-41f9-b96a-d5396a1a5a4f", "sighting_of_ref": "indicator--f1977fc2-1e9f-44ff-9c71-4e9a4a4487ee", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95dabc83-c6e4-4146-b476-329098dd45b0", "sighting_of_ref": "indicator--1fe90351-9d1e-4227-b5d5-68a312819e2f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e508e34a-2943-4335-a800-b0426ad77f1e", "sighting_of_ref": "indicator--f09480a3-ede6-4d99-afee-fc2168698f09", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e91f074e-3cc5-4c76-bbbc-8825ed411815", "sighting_of_ref": "indicator--2083fa42-5a62-4d5b-99f5-8f74f6f32201", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e492fa4b-f075-41fc-94fb-123928e83a38", "sighting_of_ref": "indicator--1e8060f5-f67c-406e-846c-96736227d709", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f072ac2-5785-45e8-ba74-0be2abff8181", "sighting_of_ref": "indicator--1e8060f5-f67c-406e-846c-96736227d709", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1705fd-ec07-4085-8ba3-e70186ae7892", "sighting_of_ref": "indicator--7e761a8b-fd45-4896-a0f5-49917f15efae", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c5e2af-1ab0-4556-9a0c-bed07708ba66", "sighting_of_ref": "indicator--883fb4db-3478-450f-96db-dd4a22844977", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69de3c3c-17d1-436f-b563-421a9c0568fe", "sighting_of_ref": "indicator--8e1802b1-2e58-47d8-940c-6e2a995742ac", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db8d6bfa-fa60-495b-9be1-284ada03f7a9", "sighting_of_ref": "indicator--9aa98c8f-4f80-40f6-88d8-04fc30d388d4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d6bd954-15f1-4f8b-931a-19589e3aa6d5", "sighting_of_ref": "indicator--0bd8247d-aad8-4c95-a3e3-016af6055528", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45cf9ad6-d353-45d1-a4dc-827ca5508ef0", "sighting_of_ref": "indicator--b3b4192f-f402-46c0-8f4c-d643c340294c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae10cd0-195a-48b1-840c-ed0116f85d81", "sighting_of_ref": "indicator--b1ea44fa-b085-4f11-ad2b-ab8acc9517e1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12db8fcd-0c35-415a-a64c-9537807a1d23", "sighting_of_ref": "indicator--0c37df20-ec35-45eb-bccc-854c1024ad17", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e13cab79-0fc6-4664-9a52-2d25a4aea1a3", "sighting_of_ref": "indicator--0c37df20-ec35-45eb-bccc-854c1024ad17", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8927e8c1-cea0-45f6-b991-7e50799d73cb", "sighting_of_ref": "indicator--5ca9e15b-71fb-4472-872e-e28647f22e1d", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b7173e5-4317-4587-b951-12fb33dcc6d6", "sighting_of_ref": "indicator--cad320a9-55ac-40a4-a214-8c33a90a76d1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11783287-2707-4fe4-b081-a654fa6bd041", "sighting_of_ref": "indicator--778a2a8a-8e52-4c25-806d-c72ec47e67ae", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee2a1d58-381b-45db-bdf5-e6c70e7f7e4e", "sighting_of_ref": "indicator--592c7f84-cc89-4b6b-ad7b-e52c29cd3845", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6229622a-8145-4643-ae97-ddfdd3183e07", "sighting_of_ref": "indicator--f24a6964-a0c1-4ecf-809d-1ddd16f4acbf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24916932-f31a-4419-bc82-949931c97b48", "sighting_of_ref": "indicator--f22eb626-aeca-4054-9d3a-c40cf1ce9832", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0540e4-18ac-4c2e-abc6-07c5c2cdae1f", "sighting_of_ref": "indicator--4109c9da-af7d-4643-ac3f-d4557818f175", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cb1ea7-8720-4911-bc49-ef8f142ea654", "sighting_of_ref": "indicator--4109c9da-af7d-4643-ac3f-d4557818f175", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b54734-9fcf-40cf-824a-12e69c9719ef", "sighting_of_ref": "indicator--2b7c6af0-a5d0-48f7-84d8-0abacd7a4b6e", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b6fe78-3771-4ef0-b9fd-f4d0c397e1b8", "sighting_of_ref": "indicator--44fa18a5-c0dc-4e43-ba94-e12ce410e075", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25bb4362-77ad-480b-863e-e444ac6006a1", "sighting_of_ref": "indicator--bf5c49dd-a24d-4c94-ac4d-f03ec24cf936", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537da00b-f1cf-44ee-b75c-82da6d74b79c", "sighting_of_ref": "indicator--b25271a9-e2b7-4a7e-a83c-8dc3d4f1ce11", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4edf489e-c0c4-4dd2-843e-fab6b0b90a26", "sighting_of_ref": "indicator--8cf405ff-8fbf-40b7-a80a-eb0d09d32ffd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7815d7-6b31-4f7b-a48e-2bc553f6f35c", "sighting_of_ref": "indicator--9d60f6ae-2d58-4fe8-99c7-99c858b67507", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd10022-1044-4fb8-94bf-d8759e0ac324", "sighting_of_ref": "indicator--6c492474-21ec-4ee2-9567-1ddd1b7eab87", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8b7948-fcaa-4fb1-8279-00c05f735969", "sighting_of_ref": "indicator--1cc1ba5a-3faf-4b0f-88a4-dc7b3339d010", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52fc75fa-0717-49ca-bffe-0e936ef34e3a", "sighting_of_ref": "indicator--fa49ecfe-8530-4193-b2e2-4caf2cd0128a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26026d4-f6a3-4356-8ecd-e0d284ac16f5", "sighting_of_ref": "indicator--a78f7b86-5741-4558-a9e2-a13bfd681c3d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b5fe05-0498-4cae-b20a-bcf5216f6723", "sighting_of_ref": "indicator--a84f647e-5a53-42ad-9ee2-1f17249b2391", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ed8336-bb67-48cb-9938-4a72eb489ebd", "sighting_of_ref": "indicator--a8c200a3-4dc4-4804-980f-b7dd9173f5c6", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af29d74e-9108-42c1-80fa-1ab2d96b45cb", "sighting_of_ref": "indicator--a8c200a3-4dc4-4804-980f-b7dd9173f5c6", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86b7179d-b12e-4416-a3b9-22bd9e0c1cb3", "sighting_of_ref": "indicator--ddfcd01e-6085-4f52-9542-5d12303430d4", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815dc6b1-2e8f-4771-9df3-f64e20866d97", "sighting_of_ref": "indicator--ddfcd01e-6085-4f52-9542-5d12303430d4", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53bb8be1-ae88-4ae3-8a86-7e4858394016", "sighting_of_ref": "indicator--9ca2f618-00a3-46e2-a497-42e57a2c34c3", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17cb512b-3c75-4a77-be3a-a847cb1d2698", "sighting_of_ref": "indicator--9ca2f618-00a3-46e2-a497-42e57a2c34c3", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40ce2314-3924-4a24-bdcc-8998c6ccc4e4", "sighting_of_ref": "indicator--09ace2c4-48f6-46cd-9f95-4e2fefbde863", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b31452f8-d545-47e1-ab11-08188a4a0a81", "sighting_of_ref": "indicator--09ace2c4-48f6-46cd-9f95-4e2fefbde863", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d727565e-a75a-4f14-9796-85597c9a27b3", "sighting_of_ref": "indicator--1f20bd9e-76ab-4371-807e-800c99aff20d", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c973281f-06c1-4910-8390-af1c6e0f5658", "sighting_of_ref": "indicator--1f20bd9e-76ab-4371-807e-800c99aff20d", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31812bf1-2658-4d27-bebb-f93a95860a20", "sighting_of_ref": "indicator--dd4f8012-b708-4070-9732-4053c6497992", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621d01ff-f917-41e0-99b9-d5adc57e83c6", "sighting_of_ref": "indicator--dd4f8012-b708-4070-9732-4053c6497992", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1349a221-5039-4927-9e54-64d46beb3210", "sighting_of_ref": "indicator--3f4c6827-37ae-4cb4-b5a5-6c3440f9ca7b", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb2758a5-e464-4f2c-abd2-8baa3f3f25f2", "sighting_of_ref": "indicator--3f4c6827-37ae-4cb4-b5a5-6c3440f9ca7b", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6384008-651b-4503-9769-36d4a176d17d", "sighting_of_ref": "indicator--c887853f-74ea-4a77-a756-0733caedb39f", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36968420-6fb7-45e4-8db8-c02b23a9c71d", "sighting_of_ref": "indicator--c887853f-74ea-4a77-a756-0733caedb39f", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72185938-efa4-4e41-b2b0-68f353889954", "sighting_of_ref": "indicator--8e70ae66-361d-4794-bbdc-b4cea54a9a57", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb11f176-90e7-44eb-a501-be966a31a3d9", "sighting_of_ref": "indicator--8e70ae66-361d-4794-bbdc-b4cea54a9a57", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f627a05b-341f-4b78-a22b-24fcedf4c5ff", "sighting_of_ref": "indicator--c7d197c6-2449-4a54-8a9d-ce119cd1612f", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c435b1a-4bcb-41aa-8100-dc25482b0d39", "sighting_of_ref": "indicator--c7d197c6-2449-4a54-8a9d-ce119cd1612f", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9484ce-2844-4e2d-9b8b-a70e4a31f59a", "sighting_of_ref": "indicator--01a4a600-1345-42f6-9812-a93506951946", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa92945-f42d-4341-8dac-bb082067679b", "sighting_of_ref": "indicator--01a4a600-1345-42f6-9812-a93506951946", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccfd7eaf-cdab-409b-9676-f6d54a73fa88", "sighting_of_ref": "indicator--8beb33ba-41e7-4556-ba03-5ef07a755b64", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5399788f-f2fc-4354-a8a9-291f046144a3", "sighting_of_ref": "indicator--c32ddbb6-3c44-496a-bb83-ac5592d5013c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72094165-74ae-45d0-a76e-4800f03fef47", "sighting_of_ref": "indicator--086976ed-353b-48a7-84eb-4f5272460d8e", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484a2f4c-b578-477b-b091-f01499f75c80", "sighting_of_ref": "indicator--086976ed-353b-48a7-84eb-4f5272460d8e", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96506528-76fa-4f14-9c8b-ae4aa49529cf", "sighting_of_ref": "indicator--c5fc6ce6-cf7d-424c-af8e-ee8bf7d462dc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75e9967-5e2d-408c-bb46-65cc80e92c7f", "sighting_of_ref": "indicator--07035664-44ba-467d-98dc-63912b908a78", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8957f693-548f-45a2-979c-690b821a96cf", "sighting_of_ref": "indicator--184adb94-dd54-48f7-8bb1-8f2c82a2030f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec5431f-b207-414f-a5e5-a8773a127c71", "sighting_of_ref": "indicator--bc383e0e-9d9b-491d-ae89-8daf6871c138", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f39ad799-076b-4cd3-983b-d54dfdd7c3ae", "sighting_of_ref": "indicator--571b8338-2aba-4b5d-98f3-29f05b13adb1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c33456-d548-47e4-9073-b5a1498df940", "sighting_of_ref": "indicator--206ecbdd-4291-41b8-b745-5a22f9b56b1c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d83f004-880d-477b-86a4-4d86ed69f2f2", "sighting_of_ref": "indicator--7a545733-dbf8-4ca4-a6ae-fc6243c575e3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3059e2-aa08-4d5f-ac10-bfa67f8a3bc0", "sighting_of_ref": "indicator--2af25115-f7de-4487-9bca-8001f3f24d59", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1266e5dd-b0c4-4d02-9c7b-8140f0174d58", "sighting_of_ref": "indicator--28faa548-61e5-46b9-ab72-dc5f3fafd056", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e46795ad-1f82-4658-9a2c-58e07302b9ce", "sighting_of_ref": "indicator--3e75a97d-873d-4f26-a457-75c4ac8dc462", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3566240-3213-4d70-8ec4-5e81ebd4f0e7", "sighting_of_ref": "indicator--50659fae-9001-4c3e-9ee9-26cb4dedc07f", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a13d3b-1eb5-4d17-84db-1ac6e29693cb", "sighting_of_ref": "indicator--c05bb156-6236-42ae-9052-703a43f59dae", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426589b7-1a1f-452a-b1e3-a1ac209d9d5d", "sighting_of_ref": "indicator--fd6e5abc-78b3-4dfe-8c30-4dc0145648f4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2880920-f1c8-48f9-bd32-21af9e6043e3", "sighting_of_ref": "indicator--5c850cf4-6a62-4df1-a039-45899e1ea72e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f61a00d9-15d2-4be3-9cb7-3a06902c7113", "sighting_of_ref": "indicator--3cf99d67-01c2-4b2b-a69d-19d535aa17e0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f90c35-357d-4316-961d-d84b598c5338", "sighting_of_ref": "indicator--b59fd803-1b7d-4a6e-bb38-2c81d54efd49", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b976994d-0a7f-4bd4-a17f-de478856f7fa", "sighting_of_ref": "indicator--7f958846-aea4-486f-815c-a04848d1c8ca", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa811224-f68b-4a3a-bee3-2639201093e8", "sighting_of_ref": "indicator--96a0ab3b-918f-4df4-84c8-6afb4e557dcf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f6310c-1256-48c6-a972-ca4214d648e7", "sighting_of_ref": "indicator--36e47ca9-b275-4c1f-a087-23a79711b914", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e81277-453a-4e16-9492-d1ff33060158", "sighting_of_ref": "indicator--c1e7b692-049d-4942-a2df-fe257dc381e9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c098ecef-2baa-4151-8977-a1fa5fb3106c", "sighting_of_ref": "indicator--a3e3aa5c-601e-4fb3-a6e8-7608698470a8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e649ec31-b34c-4987-807e-137f00cb8f78", "sighting_of_ref": "indicator--b63e4fa6-1819-4dfb-a1e8-dfdd6b0020bd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fbf04e6-8de4-4714-af08-c9ca272b55f0", "sighting_of_ref": "indicator--9232d51c-6e1d-4c3a-8e6e-bd1d075510ca", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d08f25de-02f7-456b-84d1-9637c6e8a6c2", "sighting_of_ref": "indicator--5b0ff485-32a4-4a07-96cb-ce47dcfc8ea5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f3b6da9-f664-4094-afeb-e630736a46a0", "sighting_of_ref": "indicator--cfcaafe5-acaf-4e88-a58e-d8d23fb17caf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a53c1436-d0dd-4922-9c3b-e3d16e272ed8", "sighting_of_ref": "indicator--f9c9012e-a723-4017-83da-fbba591794b9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--397763b0-a38c-47cc-83c5-85a1289d2e04", "sighting_of_ref": "indicator--6659ec22-ada6-4821-9b01-3607fa5a4720", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd55a4cd-87b8-4363-a136-f9b6e1f53289", "sighting_of_ref": "indicator--04e675d6-0f7b-4496-815e-49151e0c4d59", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6650b344-b836-4d68-9578-41b6bd7bd259", "sighting_of_ref": "indicator--6c97ef7e-126e-460d-8106-4f2286733f25", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8186ce6e-04e7-4121-9584-3c6db6605844", "sighting_of_ref": "indicator--9f847f89-ae87-4df8-b63b-32f2c4189d22", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df241245-6999-4a59-bbca-f627a91e0d63", "sighting_of_ref": "indicator--e5913e41-7fb5-421d-abef-fc1b01c630a5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e277771-20a3-4630-9001-6fbc14cd029c", "sighting_of_ref": "indicator--b7f01059-d315-4336-8ff3-7771f8a40429", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0326bae7-d70c-40d0-9f46-bc3a6dfa86f0", "sighting_of_ref": "indicator--7e017b43-4fbc-4172-9bd8-d0beb879d3a4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f911c273-7f3a-47cf-8f73-d198fda28f12", "sighting_of_ref": "indicator--7a8cc469-e2f7-4bd1-9473-4c791dade268", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b2f504-a632-41cb-bb36-ebe8662dafa8", "sighting_of_ref": "indicator--7f9c561a-0201-43e4-a48b-25675b8b7785", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--282074f6-c730-41a2-bdc1-b39b96712bc6", "sighting_of_ref": "indicator--18734d83-1b3d-40fc-bf02-2cdc1a22fdfe", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7533a300-5814-4608-afbf-73e59a1bb826", "sighting_of_ref": "indicator--b4ff3284-15b4-4063-a4ce-11ee415daa9a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1932d65e-236b-41cc-ae12-4c18769b8818", "sighting_of_ref": "indicator--182adb5c-16a7-4400-a2dc-938790d0b3c9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f86170-ea19-46a6-9d74-9fe781c73362", "sighting_of_ref": "indicator--715f4481-ee87-42a9-a294-786c2fc3bc49", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f08cc70c-33d9-4d06-8758-d423fbd25f6a", "sighting_of_ref": "indicator--52300e2e-7c33-44fd-93cf-4d1bc43784ba", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b573faf0-26f8-4490-bda3-ac3bdf9fd01f", "sighting_of_ref": "indicator--f971f1cc-f0ff-4f34-8e58-ad84a9f0008b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4520f6-f04d-4c2f-81a9-94154d159569", "sighting_of_ref": "indicator--4e7ca672-af40-4a38-bf4e-b5b798bcaa7c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec347ef5-9df7-40b5-849f-cea10b521938", "sighting_of_ref": "indicator--d33eccce-3363-45a8-9269-861f2811e3ba", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4a4d5a-24f7-48da-9b4a-999b2d855cf3", "sighting_of_ref": "indicator--8480a9e9-380d-4445-870c-11e1c8201d59", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1422b74a-824a-4840-9abd-6d9f9c1962cb", "sighting_of_ref": "indicator--4f72404a-73ac-44ac-8d00-00633b0c1b0a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb9c4c3-ea09-434a-aeb8-fbf2a437ca8b", "sighting_of_ref": "indicator--8080c101-8e1c-48e4-a044-06ec39f16471", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca32a31-5042-404d-b981-8a1e2e0d2cbc", "sighting_of_ref": "indicator--d35932d6-bba9-4aad-a456-99d2500599a2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed682574-a597-4561-9e48-1e0e7f83a6ea", "sighting_of_ref": "indicator--70049da8-2978-4df1-8477-686566bcab69", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e66f370f-93df-48a3-99dc-20d7efe92133", "sighting_of_ref": "indicator--98423db1-e3af-4f76-9f5d-42e15e126603", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20fac6c-7f87-414e-b8bc-5193e488e5aa", "sighting_of_ref": "indicator--e9be2ad5-5632-4e51-9c69-c8229639385f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578cccee-12c5-4b5a-9dc1-bf36cd190caf", "sighting_of_ref": "indicator--0a3e47e0-10da-4558-92dc-936368d1e207", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c8a623a-0340-40aa-ac7d-e69b74a7921f", "sighting_of_ref": "indicator--6d289044-0ea0-4968-bca6-75abb38f8535", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca20ff6-98c4-4187-a56e-b018234868bc", "sighting_of_ref": "indicator--360941b8-16e1-49b8-95b5-e118bb230a7e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20fb86e5-a3fc-494e-b723-0b8239db5d9a", "sighting_of_ref": "indicator--b6fa7e85-410f-45c0-abf4-a8d302879d02", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cecf5a2-6155-4f79-983a-57efd35961d2", "sighting_of_ref": "indicator--36a049ce-b9cc-4c56-aaf6-3504eab09471", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ea0c9d-8185-4245-97c9-6001a2f4356c", "sighting_of_ref": "indicator--bd672ed1-b46a-48fe-8be2-53c060ef419a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f0c64f-ba81-4a2c-a956-3929ad0fbb9f", "sighting_of_ref": "indicator--1b17e1ba-9ce4-45f0-99e3-837db0c03ce0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95898b57-73fb-49b7-b5f9-b1846c40b9f3", "sighting_of_ref": "indicator--3d06313f-ed80-49f0-be7a-7a8c45c7f93b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8dcb4e8-85f5-45ca-be6e-3631b26f3ce2", "sighting_of_ref": "indicator--dec09c35-0db2-4c58-be3a-4f234daa9afc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e0039b-750f-4299-ac3e-c0b7a75a6419", "sighting_of_ref": "indicator--50be9aeb-62d6-4732-a2e1-23ba38a35f17", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07182bb5-aa67-4bb3-a437-77c5d6843c34", "sighting_of_ref": "indicator--48105590-1aeb-45d1-a6b1-e0e96fcb8693", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7372547-720e-4d4d-825a-27fd3d628eb3", "sighting_of_ref": "indicator--3c0cd308-185c-46bf-801b-aeb8f5bb873b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c1beef0-be91-4af0-a534-8d7560138da1", "sighting_of_ref": "indicator--6fbbeda4-9df4-4fd1-a4c0-c89ab3d531d7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bdfa29f-e5c1-4eab-b886-cecb4b124057", "sighting_of_ref": "indicator--2f92f99c-a430-4a3e-b52c-64d476d295d0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78023ae9-f549-4f92-964c-908aff7ca9fd", "sighting_of_ref": "indicator--8b04afdc-037d-4848-8dc5-8cce74a55982", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d17551b-c01b-4c5f-a7ef-e23930e48d8a", "sighting_of_ref": "indicator--ba71d5fd-be9f-4191-b940-577cc4014756", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f058d169-4f29-4c56-8373-a25aa14e989c", "sighting_of_ref": "indicator--5376d7cb-3836-4e85-8579-841f05c0f1b8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4c56d4-8c0c-4e80-ac66-0354104d7177", "sighting_of_ref": "indicator--a7103eb8-2630-466c-a52a-ad163e521add", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97e2370-b3ce-464e-a247-8b5aed519868", "sighting_of_ref": "indicator--fd1a7972-8b61-4d46-a94f-65283b3961ae", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f1a785-592a-4830-9110-71e4b0acfe4a", "sighting_of_ref": "indicator--843aa39d-7cc1-4051-9382-60d4e471b53a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62faf19b-dc11-4b6a-9ce8-b52a1c0b7ae8", "sighting_of_ref": "indicator--8f013994-0db9-45c2-8618-1d49c89c503b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e32eb8-0920-4812-865a-035818d90aa8", "sighting_of_ref": "indicator--48aa2bcf-3c67-47b0-b85c-260ea4044227", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b52b436-081d-460c-9b44-5c4738fc6c41", "sighting_of_ref": "indicator--4793290e-c602-4cb4-b325-16d092a2a4b3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e35d7f48-b9a8-4a03-9545-12347009442f", "sighting_of_ref": "indicator--4591ee39-ad87-4b5a-a9a5-09758980e59a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f60f70c1-1d47-47b3-a511-8806b8231277", "sighting_of_ref": "indicator--4df19fd4-3e7f-447b-ab6a-a80a3e4ab6ed", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942d8440-3f96-4af4-9906-1f3fcb9b95a7", "sighting_of_ref": "indicator--2722bfc3-a486-40c4-bad0-9527d1231a4b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896b645b-5c18-4ced-ab55-adad6f37df92", "sighting_of_ref": "indicator--2d9e2771-594d-416b-b0a0-d932c1889b9e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89efebad-1a24-49b7-96c2-076623f3ad32", "sighting_of_ref": "indicator--fe365f88-b29f-44f4-a765-5d92a113179e", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53de3e7-f213-4ff4-9ea0-42692a2c3a7b", "sighting_of_ref": "indicator--50592b15-9051-43a3-9ea9-c76838a998fc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e5f62d-fd82-4994-9730-ff5600cb0360", "sighting_of_ref": "indicator--7d301554-6595-4807-861a-d0fffa3f30ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e72dc2-92d4-480f-a9c4-da8850f07ca3", "sighting_of_ref": "indicator--bfdcb366-e065-4a2e-80b8-1c01c55c4bc6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac4927ec-1c68-423f-93d9-a5f05e79ec47", "sighting_of_ref": "indicator--3000568e-9627-40a1-aed8-a1bce2ec3161", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e21c14e-8e70-4c38-8917-8eaf788f1b5f", "sighting_of_ref": "indicator--55669ba7-687f-425b-9583-04a70233fb11", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45277f80-55a5-4b1b-9809-9373dd1a792b", "sighting_of_ref": "indicator--d771318a-53f0-453c-a3fb-0e3134cca107", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf4a14e-6b18-45eb-9cba-5bcc2e921a58", "sighting_of_ref": "indicator--b1a30718-4e72-4760-9cfe-35786aec9225", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c254bb43-001f-4998-905c-e3d4f3ccd903", "sighting_of_ref": "indicator--72b063a3-9383-4176-850c-d2bb8cea2c40", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7814d302-fce9-41da-9acc-25c3e085fe2c", "sighting_of_ref": "indicator--d0e05161-1b78-4fba-861e-14ff571a331f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a32c04-d32f-43fc-88d8-15f30bc10cd5", "sighting_of_ref": "indicator--8c2d4347-f580-4715-9815-727fc19827d9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7267bccd-2925-4e7f-86d2-93722cf747ef", "sighting_of_ref": "indicator--1b1e7ca1-f5ea-4fee-8e83-1dface061070", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--443a2528-ff2d-4fa1-aa55-a291d264c452", "sighting_of_ref": "indicator--a8af9554-a7c7-46b2-a5b1-1aa0f2c659ad", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8281a5b4-45be-49c6-bfb2-a15d08600ac9", "sighting_of_ref": "indicator--66e84d7d-e379-405e-b521-e8123612e072", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f7ad2b-27a3-4489-978b-991f6311ec5f", "sighting_of_ref": "indicator--46c12bc8-8dcd-493d-8949-e12485f65cc3", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e9b021-e409-4365-99f9-2289b6d1a589", "sighting_of_ref": "indicator--b847c1ab-70a3-4c73-b2b0-203756870c00", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe15ab3-b399-48f1-92f2-e251c32583cf", "sighting_of_ref": "indicator--a85948b0-b537-4d30-afd9-e88e97c31789", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2504d216-e078-4dd1-9e20-55097e64f8b8", "sighting_of_ref": "indicator--0196b43f-7888-46d7-998b-acbfef5127c7", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0738601f-8b62-45eb-b934-8338917a8c84", "sighting_of_ref": "indicator--a2b49df9-8623-42a5-bcf6-d46f0dbcea67", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b2779c-23ff-4083-8d3b-0eaa033476fb", "sighting_of_ref": "indicator--a91fd852-e9cd-49d6-a16d-3f63f3779eff", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1aac1e-71fb-4576-8ec2-de0228c5686d", "sighting_of_ref": "indicator--99e02859-9a46-4e6b-a768-e0165f286a7b", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437191f1-442f-4739-b81f-0cd7d49dbe5d", "sighting_of_ref": "indicator--feb0f785-fd26-46ff-8975-8b11ddc1b2bf", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde1eb75-2d63-4ef6-87dc-e44601fbd62d", "sighting_of_ref": "indicator--79732be6-cb57-44ab-83d3-ff4a5c405dde", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c7a3e6-2a44-4fbf-bb55-54bab00f031d", "sighting_of_ref": "indicator--e6d476b9-fbca-44ea-bae9-0c752393dc89", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efeef0c2-bdcc-4a38-bd0c-62824848c8e1", "sighting_of_ref": "indicator--b530f169-9f3e-4b56-a8ed-89816f602cf8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a13617a-2bc9-4efe-8028-27f587ef9ed0", "sighting_of_ref": "indicator--2ed50f41-f027-44b7-859d-3678ebf22ed0", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b48dfba-43b3-4c23-88c4-120ab6fabccc", "sighting_of_ref": "indicator--6e891c96-a19f-4806-a6b2-8fbb3278ac87", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ecae208-907b-47cb-ae72-03adab2d420e", "sighting_of_ref": "indicator--b6ca6940-76b8-4046-a057-94a1f44b9f14", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d21e509-bef4-4a57-a0e0-1fb578add174", "sighting_of_ref": "indicator--b2054a3a-a99b-488b-8301-42a98cf86abc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f241d42-7b1b-499c-ae71-02932fe95220", "sighting_of_ref": "indicator--6f94fbbe-7045-4a78-9eab-8447b4877417", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c95a2c2-a1c7-463e-a172-e7c54b6e6fb3", "sighting_of_ref": "indicator--85b440fe-cca4-45b1-9d33-ff514fa3f4d3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3327c24c-639d-4d19-a8a0-5c81944034ed", "sighting_of_ref": "indicator--7fbc019f-2121-4667-8a21-41b684484f4d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ffdad1-ca15-40c5-9aaf-1965099cc6b9", "sighting_of_ref": "indicator--55b77d1a-8d49-415a-a63f-a83e9e5bc5d1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e153d071-e8e3-4c2c-94e9-950f118d497f", "sighting_of_ref": "indicator--02a844b6-83a2-4c68-8159-80558564b925", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--390d16c4-ec64-48db-a4a7-87b5417a0e41", "sighting_of_ref": "indicator--5f4361b5-421c-40e1-b3d5-4fe4c721a969", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--024185aa-0d53-45db-b084-8a1fd0c71010", "sighting_of_ref": "indicator--5f4361b5-421c-40e1-b3d5-4fe4c721a969", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7649e9d5-69c2-474f-8612-2a23ce1e3c4e", "sighting_of_ref": "indicator--0808bfbc-85df-46d9-bf29-314a91834923", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b36ee9d-96d3-4dcf-8b20-db706eba5b5c", "sighting_of_ref": "indicator--07c88d30-49a4-4fd5-bfd1-6e1698f906b3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b88456-b301-408e-82a9-36944f347695", "sighting_of_ref": "indicator--79f70ec5-eed2-4cff-8feb-4afa7eebd058", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd68fd2-1330-4ddc-9ec2-2bc13087d74e", "sighting_of_ref": "indicator--e6faa8c3-56ca-40ca-b398-202f273288bf", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b7bdbe-0980-44bb-ae76-b674d02452c4", "sighting_of_ref": "indicator--2806fedb-fe13-4d7e-9561-0f5236be55bb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e7ff94-1c27-4688-a181-56dde40465ae", "sighting_of_ref": "indicator--b4cba2c6-723e-4674-a916-be73ed1223e6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e056dd9-8657-4e10-b66e-4f6a21687f79", "sighting_of_ref": "indicator--8a85e844-905b-4eaf-ad7f-59fdd3089bc1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90dbc0b5-c480-42ce-9baa-b2a2b8365126", "sighting_of_ref": "indicator--4497b9f4-c6fe-46d4-8678-e9b38909cabf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca3d1c4-301f-4536-a469-d73e490ece75", "sighting_of_ref": "indicator--eb8da488-7756-442c-a018-272d48a3acac", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab1a7e0d-8225-48cc-af4b-2b3a387b11e7", "sighting_of_ref": "indicator--3d12625a-8dec-40d3-ba61-5d4b2b6c8b01", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5056e5ba-89c8-4971-8f04-7a3427479e50", "sighting_of_ref": "indicator--f1cb5897-edf8-446f-8e3a-473dbf0d3c7e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a87af730-2019-422d-9668-afbc48a5dda8", "sighting_of_ref": "indicator--29d99978-6643-4128-b7c9-fbb9f8f92355", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6394f581-5b15-43e6-8959-4e43fc26180f", "sighting_of_ref": "indicator--fc10764b-6ab2-4450-94c5-96b14f059bc0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--691c9f42-7329-4ba2-9ddf-2305560d9d1c", "sighting_of_ref": "indicator--69a76b8d-1ca8-4090-9cc4-806a00583b67", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ebeb3b-dccc-4006-8ad3-84d5eda3750b", "sighting_of_ref": "indicator--e0268c9a-7eb3-438a-a880-91e60ed81711", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39379815-a451-41a0-8c32-6672ea6b12c8", "sighting_of_ref": "indicator--8b3ea981-2b33-48ed-81af-f9d512894530", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd69642-3c1e-401e-a6d0-de62f20fbe61", "sighting_of_ref": "indicator--6bd0606e-3960-4681-b5af-390c9fbccdf3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--616ea01d-e211-460b-b721-352217c34af7", "sighting_of_ref": "indicator--9e700060-b323-407a-a2e1-4c5431a5a611", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97d0a03-5443-4fd5-9e3e-66ed62438728", "sighting_of_ref": "indicator--e4c11f54-015a-4816-8ef8-cffae4df3a3e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9d93e1-65f0-4412-a293-0ef0158810f1", "sighting_of_ref": "indicator--16450857-e6a1-4306-ad8f-d639f80ad1ef", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5399a566-7e70-47c2-90cc-653c19746d94", "sighting_of_ref": "indicator--c525c80a-bccc-4938-a6c3-a28023e1215c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1404789e-b429-4f1d-83e3-b3bbb8a7a8b4", "sighting_of_ref": "indicator--42ffc1f4-bcbd-4d8b-a706-2ab58a4246c4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828a06cb-8718-4599-aa87-a7834623169c", "sighting_of_ref": "indicator--90b9ed19-36a2-44aa-9e77-4b303d64ed4b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e9e49c-a5d6-441f-8078-c970a12d6a56", "sighting_of_ref": "indicator--90b9ed19-36a2-44aa-9e77-4b303d64ed4b", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92278ffd-8038-4e2b-b147-a284c4990404", "sighting_of_ref": "indicator--db5d02f4-6fd7-4c7d-b9df-3d9aec390d4f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4863123-dbfe-4c81-aaf1-1494990f34a6", "sighting_of_ref": "indicator--c21953a3-1dd5-447c-8251-df6548d8dbff", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c0377b6-5457-4123-aee8-5f1aebf2d339", "sighting_of_ref": "indicator--15a92c4b-c821-4e69-8a50-98ef50e9222d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab03b9ce-3875-43bb-a409-bbe0f86fb099", "sighting_of_ref": "indicator--f80b26ca-4214-4e01-b089-351a544aa3d0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aad6a89-cfe9-4aab-bfb3-1fd944468612", "sighting_of_ref": "indicator--141a6f03-e093-4851-87f0-4bb0fb249544", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080f6b41-7ed2-4018-b932-8f07dcd7ce68", "sighting_of_ref": "indicator--d9327544-5042-4168-9dca-a9696bb2c01b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e9a745-fc9b-4b76-8475-7a62595eddc1", "sighting_of_ref": "indicator--71dfb1a1-5ec6-4206-9281-56893a82a500", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff6c15bc-d784-429c-a489-e4772556ea8d", "sighting_of_ref": "indicator--b532fbed-0c0d-4f50-a942-0bee5e428f9d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c16c79-ee13-45aa-9179-67a2432c5e85", "sighting_of_ref": "indicator--04a67d72-eaf6-48aa-a280-42168e9639cb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee94c66-0ced-4f9c-9c63-a9e162d5b227", "sighting_of_ref": "indicator--29847651-e314-470a-85b0-b16315d64ea0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa696b5-5527-4ccf-ab8c-4c4a4716d379", "sighting_of_ref": "indicator--a5b676ca-64ae-4afa-9d2a-2794425a707f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba94209d-4c0d-4b3c-ba42-7751d1f2c9ec", "sighting_of_ref": "indicator--0277b0cb-fd58-4250-9681-5d2f4d017516", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a898666b-6668-4c43-b467-8eed13dabf58", "sighting_of_ref": "indicator--26e8a806-df60-4e42-aff7-9a75aaf317f8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e70786-a299-43b6-a4a9-74ee3e923b27", "sighting_of_ref": "indicator--f525c52b-580a-4051-aa69-ccdcd7497161", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b71624-1d5c-4c15-a6d1-c41109b59708", "sighting_of_ref": "indicator--34dd64a5-367a-436a-a9f2-e56067278df6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c6a29d-a14e-4a01-a7e6-8e81ea9e25e7", "sighting_of_ref": "indicator--786c9ede-bea4-4139-bcac-5b0f0f317335", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a7c023e-a458-4f24-8855-386653e6d374", "sighting_of_ref": "indicator--ff5963ca-6201-4988-8053-a886de36daf9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45dbceea-0f80-452d-b906-4d9aff4d18c0", "sighting_of_ref": "indicator--9f8384f5-29ec-4210-b664-90902ca7c8df", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c2dbf9-a506-4775-b07a-02bed715c3a3", "sighting_of_ref": "indicator--3e1b310f-20c5-4de5-8329-d3090a757fc0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f3d08e3-eaca-48c6-ade4-99371125722c", "sighting_of_ref": "indicator--4d278540-8c9f-4bfa-a099-425cba2735fd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498211fe-5e4d-4d0b-aa18-1597de404bc9", "sighting_of_ref": "indicator--1e7b5072-0e4a-4a21-86d4-db5736871608", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5735401-cba6-480c-991f-bbc7536d68c4", "sighting_of_ref": "indicator--6366b9a7-e05b-4743-966b-e82808a9a69f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfd8c178-2ef2-4daa-8867-4ba4cd85561c", "sighting_of_ref": "indicator--18f733e2-0d0c-42f8-87c4-49b706deb00e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15290dd7-11bf-460a-84c2-39ad5a713b2e", "sighting_of_ref": "indicator--07fb3b7b-d71a-4f7f-be48-b1ce0c6c8e89", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c4f2fe-0c87-4a4e-a40c-68fce5f0603c", "sighting_of_ref": "indicator--d951174d-628e-4384-8984-3a10ecf0ba2a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb684f21-633d-48a5-9b4b-15b517f60e68", "sighting_of_ref": "indicator--e14d8eed-2da2-4f09-b45c-985905a81cbf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e211fb-3e10-4a06-b811-b3edf06a0848", "sighting_of_ref": "indicator--b8076876-60bc-4973-b550-ec5242c15e20", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed521197-7343-45ba-a7c6-97b2db95877e", "sighting_of_ref": "indicator--58f17dcc-a39b-416d-bc60-f236b4ee2363", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154f448d-5ed1-4838-96d3-8d121cf64701", "sighting_of_ref": "indicator--d6e5fb08-0d7f-44e6-a77e-73dc7ed948ee", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d93623b-99d8-4b6a-bbc6-91564233f2d8", "sighting_of_ref": "indicator--e9328e9d-8c49-497e-9617-179bf3a4970d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd13174-7a46-4ffe-bfa4-66dd0c346127", "sighting_of_ref": "indicator--eca96943-2198-4563-a001-2b2b5b32b0b6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa7d7d1a-c79d-4e16-b018-7218902aa7a5", "sighting_of_ref": "indicator--b97268bd-1ecc-4fd9-8af6-23a38b29d868", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7375ed4-32cd-479a-b190-f8639140e021", "sighting_of_ref": "indicator--00753116-5c5e-4876-ba7b-9efd74b8e7d6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4bc9f6-13da-4ce5-abc9-f7c5c62d9fdf", "sighting_of_ref": "indicator--940cb0c3-d790-4e2a-a8f7-ad5178d9f314", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db043e6-7ec5-4284-ab03-ad1d36e3c66e", "sighting_of_ref": "indicator--5486d10e-368c-42db-8ee4-9370995d18a8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95651646-451a-490e-9826-6ed26c02606c", "sighting_of_ref": "indicator--089b38c7-f6cb-464b-ba1a-9fe02f213ac0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c762cda2-da15-41ba-878d-eb04a28cc83b", "sighting_of_ref": "indicator--fb3a4c9a-ed5e-4e9b-8816-07e2650bf7ae", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574bef64-7490-4613-b9b5-0bd8e2b2abcf", "sighting_of_ref": "indicator--5c291612-28bf-4776-a789-9f972d6f6048", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c689c7c-9144-46e0-aa1c-0241a961dce1", "sighting_of_ref": "indicator--aae89629-51d2-47b2-b239-d2803739b7da", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307e4e52-df7b-4ac0-a456-4faf846ccb71", "sighting_of_ref": "indicator--c234e55d-7105-4a73-8990-937d099caa68", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9bd7eb5-d1fa-4f4f-beae-a077060e0abd", "sighting_of_ref": "indicator--7a635b7d-5c58-4485-88b1-dbc77007c7b7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a97b2d9-b5a1-4818-a990-06c995c7b2c7", "sighting_of_ref": "indicator--7fccd5ec-d9e2-4101-8c8c-c3dbf06ee5e8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82063686-82e8-4594-b8d9-7615661a018e", "sighting_of_ref": "indicator--bc8b4ac3-ae19-45fd-ab1d-00c52acf5665", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d74162e-b0c0-4edd-87b5-aa5f18d04f56", "sighting_of_ref": "indicator--8559b6fc-6dd4-4fed-9300-49cac2cccbd4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7237d4c1-dca1-463f-9ede-20236ab206ab", "sighting_of_ref": "indicator--2f6b99a6-c635-4025-bbbe-80bdb256bc0f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db929d67-f41c-43a4-acc0-b175cb37f485", "sighting_of_ref": "indicator--bde9bc4e-4103-4c2e-a52c-80744c4e08aa", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf73a69a-8ee4-43c8-9933-883abe1c5ea3", "sighting_of_ref": "indicator--66c7476b-fab2-4863-b7aa-d3ca6e0b872e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18a9a7e-d935-4d9e-af76-593b26f32a05", "sighting_of_ref": "indicator--0ebbbf9d-e183-4a52-8ba8-53cb90443c4a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e18785a-4dfa-4329-a9a8-2ce79167a3dc", "sighting_of_ref": "indicator--00feff6e-98bd-4c97-aed0-59cf09178b74", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a20c94-97c0-4fb2-987f-9b8715cef14e", "sighting_of_ref": "indicator--8d48809e-f24f-4762-81a9-2facb372d3e6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82710b88-9716-43d9-a299-9e5a4a5ddc4a", "sighting_of_ref": "indicator--ed83a5bc-d8a8-4306-9912-fd6abdf575b8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba91046-14ec-44e3-98b2-ea05940fb25c", "sighting_of_ref": "indicator--3497f1f5-5ab7-4684-a8a4-ec2b4bbf2a1a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2c7bfd-d99c-4223-aad6-08d993363cdc", "sighting_of_ref": "indicator--9185e2ad-2869-4a4f-b0f7-94c8747e015e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd392ae8-76c0-43bd-9003-be31d87c3787", "sighting_of_ref": "indicator--e974e732-863f-4b74-a735-d9185a88b49d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6381fd67-4ac0-4a89-b783-435ba6775019", "sighting_of_ref": "indicator--41845760-0659-49f4-a549-83ec02e829dd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b1fc44d-2582-4d1d-88b3-7d5592e31cb8", "sighting_of_ref": "indicator--1e8325a0-e88e-4a56-9cd9-f858bb470759", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--787dcf5d-077d-49f2-a461-d9350f428508", "sighting_of_ref": "indicator--90b7549f-d05a-4b6e-b048-5ac45a9830fc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad8268b-7e5f-4493-87ce-9f0f74ac584c", "sighting_of_ref": "indicator--042038ca-83ac-432e-83b8-ae49bdf3d21e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb25730-aae9-4526-90fd-a04c0ff0e802", "sighting_of_ref": "indicator--ad400e5b-b785-430f-9e5f-accbd6c008d7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0361181-6f19-49b8-a014-ff3706a015da", "sighting_of_ref": "indicator--61a8d52e-1902-4265-b4d5-3bf1b1ecf6cc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04d6df8-0503-40b3-9a19-a69ce41ce981", "sighting_of_ref": "indicator--835ebd94-c357-4345-9611-dc3d98fe3c7b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd5f6f53-fb49-4977-aecd-a9f1915d0534", "sighting_of_ref": "indicator--c7812b66-0366-4fa9-bbf0-95ed6fabbb74", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae7bbb2d-9083-4c26-97af-12507911907a", "sighting_of_ref": "indicator--9c0c366f-c86a-451e-a0b7-7e0aad4d8352", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a44faf5-3829-476f-8a76-9f25a8aa94a9", "sighting_of_ref": "indicator--526d8e1d-8e4b-4e9c-b6be-524517b5f69c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf88c46f-9b73-4298-b5ed-11c600b02175", "sighting_of_ref": "indicator--42e86323-1833-4c8e-aa96-ac42ff926b23", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf6c5b4-5c75-4a89-82bd-1877c6675910", "sighting_of_ref": "indicator--27cbfa26-f07b-4dc1-857d-568c33e39462", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a884b2c7-98bd-41a3-8a05-36d7dfbc2140", "sighting_of_ref": "indicator--41c4bef1-a88a-4588-a461-d3c90820e300", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6129e093-a3a2-452d-8bc4-6c3fd1d16f14", "sighting_of_ref": "indicator--880a48cb-f9d4-4cab-8071-e0ea48b194dd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55a3275-8e34-40ff-b3ad-6d2dd5770a0b", "sighting_of_ref": "indicator--6c2de0db-4e69-4452-9422-1aeea4936062", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--639e52e0-ed23-4b1e-8945-0d2e19cf7866", "sighting_of_ref": "indicator--d49405c8-af77-40c1-9ecc-533fd30dfe4a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0856e484-7958-429a-a3bb-136be72ff5af", "sighting_of_ref": "indicator--a29492f9-2425-4447-b925-93440d14a04b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11735fa5-4766-43eb-a3a2-25c0e4454b95", "sighting_of_ref": "indicator--291174bb-94a3-4dbd-8f70-75cd11977e93", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d6e405-e9c1-44d3-936e-da61d64860f6", "sighting_of_ref": "indicator--b736aaed-c7e3-458b-9d3c-109cafa4a038", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f9ee80-7aec-4183-9df7-16ff591e8f50", "sighting_of_ref": "indicator--50d8a6cf-ca00-4994-a438-610675d9cdf5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b57f28-f9b2-4d0c-a2f5-7f570f412284", "sighting_of_ref": "indicator--0e6b5101-0936-4bab-b862-3c67d5856420", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb010b8e-cfb7-4d90-8b3a-e0d7309e50b3", "sighting_of_ref": "indicator--943d43a8-1b29-40a0-93be-67770e509987", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d65836e3-9a1e-4fd7-b718-7812dd45af26", "sighting_of_ref": "indicator--9d8ab77e-cb8d-4e3c-9e8d-fa829b632759", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd7b134-0737-4f58-a3d7-f8450325b5cb", "sighting_of_ref": "indicator--b0722196-3a2b-4b71-bb02-8c2426fe24f9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deeec96c-473f-466d-96a5-b59e0fa14818", "sighting_of_ref": "indicator--ce735205-41d6-431c-8b1c-6daf941dbe0e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a345d7-d2f4-4620-974b-9d0a1df953e1", "sighting_of_ref": "indicator--b7ca07ec-9cb7-4e62-ada1-688cd8b9e6ab", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f327b7f-4192-4370-802b-e26435856117", "sighting_of_ref": "indicator--0c3f6cad-3d2d-479f-ae19-9a82b56c227f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6056e6e-2c2a-4de0-9359-8fd3ce6533f8", "sighting_of_ref": "indicator--bc71ed5f-30ff-4e3a-83b6-4f6e69006a02", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cbf2de9-81cc-4f52-b580-1e4a782e3bfe", "sighting_of_ref": "indicator--03f757a3-6723-4110-aa4e-987a774e53ce", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60cc8121-0725-4b86-9764-44c2ee59c4c7", "sighting_of_ref": "indicator--20be507c-607b-4a20-aacb-bdd6f7573d44", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0af6ef-e16d-4a16-82b5-569b83fafa1c", "sighting_of_ref": "indicator--1aacee27-6f48-4f8e-9e2e-0b291f7c4ad5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40321b05-a4e2-481d-9adb-02f33d2f5d82", "sighting_of_ref": "indicator--f6555bcb-8fbe-404c-8439-5299b5c843e4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c0c131-fb26-49fb-bf01-7b652392fd95", "sighting_of_ref": "indicator--0da6fbda-408c-4801-900a-5c87a98980d6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3bde070-afe4-4f57-8fd2-7e865ba0ea46", "sighting_of_ref": "indicator--f697037c-3c09-4fa8-8862-71060fecb8da", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f7c363-fb7d-4e6e-9768-a614a6bc5457", "sighting_of_ref": "indicator--7beca5eb-8cc7-4a49-8ff3-3e88faac7469", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d58d303-c511-43ea-9dc8-c182d9c28332", "sighting_of_ref": "indicator--ba30635f-10f4-4efe-9192-12ff80904c22", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3d18be-f1bc-486c-881d-1a521f31c8bb", "sighting_of_ref": "indicator--cb8820bc-51e3-47c2-8385-b5217be9077d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed696f4-8f37-4d59-9210-697c3abb020f", "sighting_of_ref": "indicator--2d69159a-5cd1-4e0e-a26b-d177d76dc6b4", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6de8492-9b7e-4d56-9309-1ca35b462461", "sighting_of_ref": "indicator--2d69159a-5cd1-4e0e-a26b-d177d76dc6b4", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df678643-8b38-4da8-be52-ca0da9868cd9", "sighting_of_ref": "indicator--d8de6fab-e24b-4b67-8e0b-2e067923cc82", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8d0c59-76f5-4493-897c-b2a0e865e5b7", "sighting_of_ref": "indicator--e76325ab-d3d4-457d-aa63-28f56215a6f3", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e6cc035-5d4a-4e02-b4ee-cc413b05cc53", "sighting_of_ref": "indicator--5e1a465a-b3bd-4a82-ad56-0791fda7d656", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8deb39-c3ff-4015-9c3b-0a104acb0e7e", "sighting_of_ref": "indicator--3b8b61a7-b2db-4e14-b9da-07fcde1d0b00", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ab4d37-14e1-4039-9811-5cf14a25ac2e", "sighting_of_ref": "indicator--5814ab1f-5295-41c0-b483-31ce42610ec3", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2dcd0b-42af-4f57-9f45-80ee90f51fae", "sighting_of_ref": "indicator--08e256a1-0f56-4fda-973f-071d6be8156b", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33424a55-8278-4014-9c54-06a2c8d20795", "sighting_of_ref": "indicator--08e256a1-0f56-4fda-973f-071d6be8156b", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c1cf37-07e7-4efd-bb5b-00ee44104a90", "sighting_of_ref": "indicator--dc8c3e9f-045e-4413-b5b3-79f0fa63dea5", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d512d10-560a-40e1-ae61-c040650ded10", "sighting_of_ref": "indicator--dc8c3e9f-045e-4413-b5b3-79f0fa63dea5", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5192fade-5dd4-4c90-b48c-9a190a5e0ce1", "sighting_of_ref": "indicator--622b4666-82d2-45ef-9bf8-074146377bf5", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ffb184-d5f8-405e-978a-5cc54d621757", "sighting_of_ref": "indicator--622b4666-82d2-45ef-9bf8-074146377bf5", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17dc7bf5-7d4a-4098-a219-f1b98a821805", "sighting_of_ref": "indicator--ac20f3f0-ba1d-4bc1-986c-939ce20f81db", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28942d5b-bb07-4b5a-99ff-d0e609694bae", "sighting_of_ref": "indicator--ac20f3f0-ba1d-4bc1-986c-939ce20f81db", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2e729b-5b70-4e4f-8ccb-d709d8caf06c", "sighting_of_ref": "indicator--e738fc5a-7d14-4b14-a57f-21da35cca1bd", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989e6516-1e89-45b4-a487-87623e50c35c", "sighting_of_ref": "indicator--e738fc5a-7d14-4b14-a57f-21da35cca1bd", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d2814d-0e02-4dff-9bf4-7ce29f7b6007", "sighting_of_ref": "indicator--13226fdd-875d-4adc-8fc7-b828988fd073", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b89d8b7-3c31-4dfd-9c4e-631591ecf0d8", "sighting_of_ref": "indicator--13226fdd-875d-4adc-8fc7-b828988fd073", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1586a8b6-e5bc-4fed-9f29-931e7edca063", "sighting_of_ref": "indicator--1b0106b8-8998-4fa3-a485-3ed6f3637c89", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d70c48a-8814-464d-b6d0-b86d5a0bf6b9", "sighting_of_ref": "indicator--1b0106b8-8998-4fa3-a485-3ed6f3637c89", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b598d4b-5bf1-4dd2-a33b-078ae01a3801", "sighting_of_ref": "indicator--81c53f78-b91e-4ec1-a6d9-d46b21e5a303", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8527961-7491-4edd-ab5c-26f6669bd3c8", "sighting_of_ref": "indicator--81c53f78-b91e-4ec1-a6d9-d46b21e5a303", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8080ce1c-18d4-47d8-b7dd-2130e65c1bcb", "sighting_of_ref": "indicator--58b6f098-e587-470f-9c3d-dbc77c59c131", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c0ab816-95d8-4cbd-83f3-49d2fccb21ae", "sighting_of_ref": "indicator--58b6f098-e587-470f-9c3d-dbc77c59c131", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--045e3adf-e327-4628-888b-efe3581e0999", "sighting_of_ref": "indicator--eebb2e0b-4c26-42dd-987e-9d8424f32c54", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8056ba71-cfaf-4542-96cc-5ec92a1c3969", "sighting_of_ref": "indicator--eebb2e0b-4c26-42dd-987e-9d8424f32c54", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a3d5caa-0ea1-4f12-89fc-49f1a4ea5b49", "sighting_of_ref": "indicator--7391835e-5762-40c7-a550-a588d1b462f1", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceaf328c-1bdf-4710-b30d-b0a8b588db15", "sighting_of_ref": "indicator--7391835e-5762-40c7-a550-a588d1b462f1", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c37d422-3d8e-40fb-a6e6-a08278f837a7", "sighting_of_ref": "indicator--f72ec3dd-63d6-4569-b607-8f96f16e4ada", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43a8486-03f5-4360-8d01-c7583b689b2e", "sighting_of_ref": "indicator--ee975809-796f-4b88-9a80-dc144817f366", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2736216-568f-43a1-b873-f1cd6611f4f2", "sighting_of_ref": "indicator--c53f191a-db70-4462-982a-903e92941b9b", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4258eefa-464e-4f3e-8ab2-8ea945ba3cd0", "sighting_of_ref": "indicator--c53f191a-db70-4462-982a-903e92941b9b", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d011ca7d-87a6-4b5c-a0f9-7a21e0394f8e", "sighting_of_ref": "indicator--b375b1af-ddb9-4bf4-9bdf-24dbaf3453a9", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef2369b-b313-4924-a51d-d9a46d1ac3fb", "sighting_of_ref": "indicator--b375b1af-ddb9-4bf4-9bdf-24dbaf3453a9", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e8aea8-ccc3-49b3-aec2-d1c4bfdedc30", "sighting_of_ref": "indicator--e17533d5-e9be-455a-b7dc-c5e00fac28c6", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a434d09d-f8fa-456c-8070-daec1189cde5", "sighting_of_ref": "indicator--e17533d5-e9be-455a-b7dc-c5e00fac28c6", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f11946-c568-42d9-a018-8e04af8e0bc7", "sighting_of_ref": "indicator--bd72986e-0f16-4d4a-93da-57bd2115c0ea", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b3cc98-7338-4a1f-ad31-90ef3fcfb8c3", "sighting_of_ref": "indicator--bd72986e-0f16-4d4a-93da-57bd2115c0ea", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276ecb8b-91f6-463a-94e4-6a1c0b06e35a", "sighting_of_ref": "indicator--929cc420-6631-47e5-ad33-fa0486e8ed15", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165f2da7-f6fe-42d4-b7ed-dc7b7ef74cfa", "sighting_of_ref": "indicator--929cc420-6631-47e5-ad33-fa0486e8ed15", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c5d489-1612-40d3-894c-104a14ec2990", "sighting_of_ref": "indicator--9f119c77-ccd0-42c5-8d5b-e638baa93c88", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326fad32-081f-4d84-afef-87145b865a3f", "sighting_of_ref": "indicator--46e42a2a-024b-4493-bf6d-a49cb5f37150", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb8d2f5-9027-4237-9206-f22c909880aa", "sighting_of_ref": "indicator--ee5e7c0a-1ee3-4c31-a1c1-2474b4eb195a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f661398d-0fe5-4c8a-aa6f-5aed4fc57e0c", "sighting_of_ref": "indicator--6b2b0ff0-d194-4fb0-a1f5-019eefb6b695", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba4ba2e-9158-4329-b51b-3ee763db79fa", "sighting_of_ref": "indicator--3400134e-7af6-403b-bb46-03353f0a454b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4790b73-c23e-4101-adf0-d8ccc5decc0e", "sighting_of_ref": "indicator--922c99c7-41c5-482c-8edc-fa005a1c192f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ca5692-b71d-4e59-900e-93b6a900e825", "sighting_of_ref": "indicator--658d1444-76f5-41b3-9e59-b141fd2256dc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1356702e-c57d-4402-a5e6-d63814477cee", "sighting_of_ref": "indicator--16f94b49-ea46-4dcc-afd2-542ea467f004", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdef0303-3798-49fe-9cdd-6caf901be6c1", "sighting_of_ref": "indicator--d52003d4-38d8-4398-a402-ee05f370ac74", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e75e953-8383-45e5-a281-9afa438e8f8e", "sighting_of_ref": "indicator--c9135f51-8520-4174-9e7c-b911fc275672", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--674ad544-9cb8-43f9-b008-a048baa0fd42", "sighting_of_ref": "indicator--8e3cf8ce-88e3-4bb6-99d8-8e8020a97e5f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46074cd9-4cd3-4775-8eec-6e8990b1a720", "sighting_of_ref": "indicator--d3fc8030-a1cb-4c1c-9a94-382ab15f17d7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb5cac1-dcc5-4773-8e63-414865b869c5", "sighting_of_ref": "indicator--c052c105-974e-4199-84d8-3b2a20db8937", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3af329b-163e-45ea-aa67-151447d63d2d", "sighting_of_ref": "indicator--a81f9075-2151-4db3-a5be-99560dfad29d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d7250f-381c-4637-b27f-f2be382a3e31", "sighting_of_ref": "indicator--d22a7e69-327a-47c5-9237-4fd40eb005de", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de9c703-cce0-494c-9000-8fb2345e355e", "sighting_of_ref": "indicator--0085ee85-3d8a-49e9-9629-55d92b65ed08", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9609d14-002c-4e60-b598-10c639060215", "sighting_of_ref": "indicator--09980b2d-1d16-47a6-890a-be6e809ab33a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679f25ca-3f88-4968-8dd8-028aea62e279", "sighting_of_ref": "indicator--8661a83c-d28a-4b96-a758-935f20df44a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--628211c2-ebdd-449a-a085-8bc87f87e17a", "sighting_of_ref": "indicator--0b0e7cb3-debb-4333-81b2-abb41faf6d23", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--124c451d-c99b-46dd-b969-71a1a5deb693", "sighting_of_ref": "indicator--ad0fa633-2057-455c-ba4f-c52f3b07fb1e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eaa91c8-3a75-4401-8627-48af52df7d7b", "sighting_of_ref": "indicator--623792b6-11fe-4506-9f0b-d57bb75f6bca", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e3bc10-61b6-41cd-ae2a-480f6dbf20a0", "sighting_of_ref": "indicator--f5c792ec-a9dd-4177-a24a-21cc97df7f52", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d3a4241-99d8-4c39-88dd-a15e4d0a6073", "sighting_of_ref": "indicator--e4383dc0-af99-4029-a0fa-4aedba48206c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2fbcad-d5ce-49ec-ad1c-1a7de3291ea6", "sighting_of_ref": "indicator--90a626d1-795f-4b20-aac7-476a151041a8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694182ff-b213-42a0-8953-c1ebb46271bf", "sighting_of_ref": "indicator--10637eca-aa39-4e7c-86d0-2bb1492d7b2a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3df2f1-2ca5-438e-8041-e0be55f0ca99", "sighting_of_ref": "indicator--06f3a700-b5d2-4e9e-8db9-aa0ab6076e54", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb5bcca7-793c-4224-9f80-484a093c6410", "sighting_of_ref": "indicator--e90482d8-089d-47f6-8f09-b4a2fd5dcf3d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a2c03f2-3182-4234-86db-b58cc0427231", "sighting_of_ref": "indicator--24fdcf25-7336-4b34-a0f7-25e9f63cc0a4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04fb6cf1-9345-4b54-a8c4-b2630c8a96c9", "sighting_of_ref": "indicator--fc6f7950-b585-49fa-889f-2a8a03505c0b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58511f38-e06e-4e0b-a933-2726378bf903", "sighting_of_ref": "indicator--8ef9d744-3c56-4ebc-9b07-fcebe9811aef", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7094a0-3158-4e29-803f-e77e9a47b82e", "sighting_of_ref": "indicator--7371ba43-e577-4f8d-b031-f0a7b5e36062", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513b1ff3-5c8f-4ac3-8666-aaf8fc723a01", "sighting_of_ref": "indicator--7e7969dd-ee8e-46f4-adbe-44aab24d283c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37091b27-fb1e-4491-8060-e01c6c0855fe", "sighting_of_ref": "indicator--1f06a10f-5090-4421-97a9-d3ce5b3bb7af", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f44e62-ead8-460a-a5d6-45a2b706877b", "sighting_of_ref": "indicator--fe5bfc96-8d9b-4aef-98b6-590cf35c45c1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a9e6867-b0ab-4012-8044-5a528b063563", "sighting_of_ref": "indicator--7befbe58-e6a7-46bf-b234-bd2d0962312c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11aaf54-2120-4056-958a-26b4a677254c", "sighting_of_ref": "indicator--d43b616e-2d77-4df9-92c5-fe7e7154d441", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf0ba05-cbe7-42cd-8ca1-b837effbea6d", "sighting_of_ref": "indicator--dfdde40e-60da-4130-bdd4-83459e1e8bdb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd1a999f-9f61-44f0-b985-43fc48ca8ea6", "sighting_of_ref": "indicator--9fbecc30-6c29-4fd5-807f-e1e8d90d1315", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae3d8a0-53c7-4674-aa97-b497cf1ab7a8", "sighting_of_ref": "indicator--ac4c476e-7fc7-4284-9da2-065fda33919d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5931cd4-ad67-4710-9fa3-7870c75f1c32", "sighting_of_ref": "indicator--c868bc6b-9601-41f6-966c-cfd62180872a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--310b451c-fc6b-4de8-ac17-e2a9fd4a9735", "sighting_of_ref": "indicator--94bf24e2-4287-434c-a96d-0fc2d6b07e57", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b7523e-935a-4d15-9ca7-dedec88b5c77", "sighting_of_ref": "indicator--f68e17d3-452b-4c9c-a1f4-b5d396552c67", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9428019e-a7ed-4060-ac86-f51d69181b49", "sighting_of_ref": "indicator--9441175e-8f40-4c7f-940a-4f13e7c9919b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a1c6a1-b99b-441c-9a9f-da326d6785bf", "sighting_of_ref": "indicator--ce9379bf-44dc-4956-a1fa-ec9282b13ffd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a063243d-6954-4b67-bfec-9c4f089f8208", "sighting_of_ref": "indicator--83f8df3f-6ac6-4c50-9ce6-cb08846df1c6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e318dc-c45c-4485-9b51-51678820ae59", "sighting_of_ref": "indicator--49af647a-a3a1-4dd9-bbd1-91071c90a855", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da5ebf0-8fc5-4073-b69a-d013a113bb4c", "sighting_of_ref": "indicator--858b56b2-af09-47a5-8371-b9f369fd7449", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f668c86-7d71-4302-ad9d-90789550419e", "sighting_of_ref": "indicator--4f61dd09-796a-4957-93f1-6933adfb93e7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afeb9996-2bf0-42af-8673-168bbf631f02", "sighting_of_ref": "indicator--4fb229e8-a007-423f-bc95-9a54431f266a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3433c92-46f7-471f-a861-3225a217ed13", "sighting_of_ref": "indicator--f8136468-d8fc-4f84-9030-14c1b6153c09", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b7376b-27e8-4330-9c62-83dd47f281ff", "sighting_of_ref": "indicator--4413d972-440e-4cf7-b60f-9edc3c986506", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6c7ecb-d401-4367-89b2-baa6d392ef4e", "sighting_of_ref": "indicator--96b47de7-0a02-4ce0-87dc-59bcb906b7d3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--230245fb-8b71-45fe-a8f1-3acc28ac54eb", "sighting_of_ref": "indicator--57c24c8a-2557-41a7-a6e5-7d47a3a9c454", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61957873-5e34-499b-9613-00ce58344428", "sighting_of_ref": "indicator--58840e58-288b-4a41-80c8-c31e8fc519fe", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3518d16b-a81e-4f11-821b-74938e82e131", "sighting_of_ref": "indicator--d1557c2a-011f-4c65-b997-ec1520cb5784", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b976bb7c-a530-43f7-a910-47d07897fedd", "sighting_of_ref": "indicator--ac01dc4b-6185-40d9-bfe1-e24ebb1bdddc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fafad544-f0bd-4e7a-a32f-04c90b5629ca", "sighting_of_ref": "indicator--accf8937-b24c-4794-8498-fdff1b003439", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--397eff7b-20c5-424b-8e73-ee31b3db2f62", "sighting_of_ref": "indicator--9d5c3c4e-6b96-44dd-892d-0daf7d5874df", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156d5187-acae-4461-bdad-c4016f6010e4", "sighting_of_ref": "indicator--2ac95d01-99b6-46fa-bf65-e2746868aefb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5850799-e7d1-4eb0-9ee7-577c95aab854", "sighting_of_ref": "indicator--14f1765d-5a84-4a15-948a-fd195115c6b7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04795c1-7edc-4a66-a045-6ec469e58aec", "sighting_of_ref": "indicator--b5c5989e-69c7-45e2-85a4-569b2dbdf8cb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e55789-d18e-46f2-b131-0305175099cc", "sighting_of_ref": "indicator--cd302bd4-6d3b-4f40-9894-ef1c3bcef7fe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09a5bbc-bff9-41b5-ae20-51c80bd6837f", "sighting_of_ref": "indicator--1f54a45a-a6d5-41f8-954f-84faf4a2414b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac38356f-0c3a-42ce-b214-948e116d727a", "sighting_of_ref": "indicator--f34e10a5-7969-4af2-99f2-a44016c9a81c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa9510f-8fe8-4a2c-850f-8998d14cd85c", "sighting_of_ref": "indicator--c71ce4c9-d81a-498a-a73c-25dded0abf28", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a02ce9-8bd7-4522-a565-396bdab6a9e5", "sighting_of_ref": "indicator--55d3e911-bda6-4d6f-80cb-8aa0ba5d2a10", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed92b6a-ea09-469e-af00-18da098301ea", "sighting_of_ref": "indicator--8db1ff82-361c-46ca-ab61-1962d0a4d0c2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073ccf01-1427-4992-85a2-cd0784cb91cc", "sighting_of_ref": "indicator--df460369-2618-4216-8093-2e6d2f457023", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f09555aa-e8b5-4b83-8eb0-9a268fc8b88f", "sighting_of_ref": "indicator--c67abdf9-0710-4134-ae8b-c20126657a36", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--630d69ef-eda0-4c1c-8fa2-af4ea07ccbe1", "sighting_of_ref": "indicator--9bb8448f-4d24-423f-b965-77ac0ac5ebd0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9697857-b1ee-4aee-8898-43f061dd73a7", "sighting_of_ref": "indicator--940824b3-7ced-4651-95a1-4af3bf7900ae", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a456f25f-8b56-4589-9feb-98102c789447", "sighting_of_ref": "indicator--32c34556-8492-4dd6-b194-30fbad69fcb8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156ecf47-8d12-4d97-80d0-4384cbd8fb40", "sighting_of_ref": "indicator--3d1f5fc6-fc79-4cf5-b5b1-f9875b56fd86", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4ad5c3-aac3-4bb0-8297-c7f6afe53d73", "sighting_of_ref": "indicator--c66eee20-a440-46e9-90f1-e839387e80e4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33da250b-8ee2-48b9-a62e-8189b720c036", "sighting_of_ref": "indicator--9118ee76-731b-4810-923c-98f0a2316dce", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1228a312-0121-4d10-8393-7745231d0c2a", "sighting_of_ref": "indicator--cde5d83d-80bf-4281-a374-129c9887b5f5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf080290-45a4-4ea5-8748-9d388f1a985a", "sighting_of_ref": "indicator--2ef62ea1-6103-4b08-a28b-b80986276e72", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f391ad-b3a9-4342-a6a5-21d8a6329710", "sighting_of_ref": "indicator--6b698306-84db-474f-8bb4-806d0f6f8742", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee11cc7d-a044-46d1-8f1b-1a9f025ef7ab", "sighting_of_ref": "indicator--51d24366-e597-445e-95c4-27e7f9b99014", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f5c8a1-4425-404f-a5a1-528e1823f6db", "sighting_of_ref": "indicator--12eaf865-20bc-45a5-8fb4-ae538854460b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a29eafae-ff12-414d-9d13-7de384d36d33", "sighting_of_ref": "indicator--9ab49ad9-792c-41a2-82a2-b91b28bc83fc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2de6321c-fbae-4579-bbab-16d140c9e33b", "sighting_of_ref": "indicator--564982e2-48ff-4d2a-9217-777e6097d63e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--860a8c59-a62b-429e-b261-31e2aaa720cb", "sighting_of_ref": "indicator--5b670012-2ccf-4ad9-8cf5-99d9e79490b0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc93ddbf-f0fd-4558-9b34-e67eb1273108", "sighting_of_ref": "indicator--4de05983-728c-4af0-9c31-dbda6ef4ea43", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e8f60f-1bb6-4613-9603-7565b472ae8c", "sighting_of_ref": "indicator--7dede9cd-d86a-4569-8c14-4c4309988f55", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad9c25ad-350e-405a-b46c-5eb6cabe1f99", "sighting_of_ref": "indicator--c0c244c3-31c5-44da-8639-11bd64a86816", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e6ba81-1617-4a70-a76d-0e38a1ad1336", "sighting_of_ref": "indicator--2adda27a-c6bb-41d7-b0e1-73758ad17dd1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--364eb80f-dbde-4bb1-96ea-f0bea8fdc04a", "sighting_of_ref": "indicator--a0b1dd45-e773-466e-ae54-05e172290bcb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c57705b-f91d-4a23-a967-2c36bd57af32", "sighting_of_ref": "indicator--f9f97b11-7f0a-4063-864e-9fb62a4e9489", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5edbbc15-378d-4267-9791-62c54c0210c9", "sighting_of_ref": "indicator--66e2f218-bc72-48e4-a151-758dd6cde1eb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c707a0-080b-4876-9bd6-8f5fc7e934e9", "sighting_of_ref": "indicator--a7ccad82-aba8-4f58-b8a3-7daf487321fd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7667ce13-60ef-4dc8-952c-b9502fffb9c6", "sighting_of_ref": "indicator--1eaf19b3-c13c-4eef-95e6-e75aa56082c8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9779e5d-5162-40e5-a396-07dea674ff10", "sighting_of_ref": "indicator--2ab4332e-92e6-48fd-98c3-b195737444bc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f6192a-0441-479a-adbb-c1578619762b", "sighting_of_ref": "indicator--cfed695c-db62-494f-9a50-073332a08ec7", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e35a2a-d421-4f30-b181-303c82e18e74", "sighting_of_ref": "indicator--cfed695c-db62-494f-9a50-073332a08ec7", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93ab554-47d5-44e2-8e87-ea41247f7bee", "sighting_of_ref": "indicator--496b7497-3616-48cf-8668-e2ee6282134e", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf5f5e09-781b-4af9-9c7b-4eef24a40e28", "sighting_of_ref": "indicator--496b7497-3616-48cf-8668-e2ee6282134e", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150cef3b-5fc3-4889-8015-a975a59739c6", "sighting_of_ref": "indicator--98804acf-9747-450a-9ba1-7e860b9f1cb2", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ac4502-1378-44dd-87f8-3f83fa625ce1", "sighting_of_ref": "indicator--98804acf-9747-450a-9ba1-7e860b9f1cb2", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--478ac4be-bf5f-4907-9b7b-795bca1d457c", "sighting_of_ref": "indicator--b6a4124d-5ac4-4e17-b00e-be1069e43d1d", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--955d52ef-7e30-461a-8bf1-412edf0883fb", "sighting_of_ref": "indicator--b6a4124d-5ac4-4e17-b00e-be1069e43d1d", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1439c1f-c0c5-483b-a95a-ff5f5dba05a1", "sighting_of_ref": "indicator--f1abaaa3-3d54-4a0f-a82b-ea7efddcd37b", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b2abb6-1605-42d7-a718-2ad3c738dc67", "sighting_of_ref": "indicator--f1abaaa3-3d54-4a0f-a82b-ea7efddcd37b", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450be583-5dbe-4399-916a-a8a23a6de811", "sighting_of_ref": "indicator--735ddf4c-9ea3-4852-bb1b-e90bd17927c7", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b17fc0f6-76c7-4789-a36f-cdbf247e7dd8", "sighting_of_ref": "indicator--735ddf4c-9ea3-4852-bb1b-e90bd17927c7", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30dd0ed8-ba39-45f6-ad77-1285c777a9a3", "sighting_of_ref": "indicator--90c603ac-3522-4cbf-87bb-b1b3f7ea7eaa", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b44dfe-cd7d-4c68-ad31-ae7b28f00bea", "sighting_of_ref": "indicator--90c603ac-3522-4cbf-87bb-b1b3f7ea7eaa", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8637ddf-bd81-4443-a4c8-f1a518107556", "sighting_of_ref": "indicator--13a2890f-8f94-4c34-9bd0-8771712e29c9", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53daff90-2797-4b6a-92ad-b821c3ac5541", "sighting_of_ref": "indicator--13a2890f-8f94-4c34-9bd0-8771712e29c9", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--220c5d90-7577-4d23-b11c-c0bd5054042c", "sighting_of_ref": "indicator--8b06a612-768c-4a2e-8ed3-e3ac655a7f90", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f41558c-fe87-43e6-8141-bb6a31136af2", "sighting_of_ref": "indicator--8b06a612-768c-4a2e-8ed3-e3ac655a7f90", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904956a3-bf79-4782-8b8a-fb02b218eba1", "sighting_of_ref": "indicator--78a51092-4ea3-41c6-9172-b5074796c387", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71fc21ec-31de-4e18-be56-15dc72d8ca0c", "sighting_of_ref": "indicator--f1e36bb6-d86a-4702-8af7-7906c33a4d0e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1e0403-3b10-40c1-ac6f-a0feccbf7043", "sighting_of_ref": "indicator--bad5a26e-dd22-4c45-b6c0-91e4c51d9a52", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac33e8e-e253-49d6-b2eb-15504fee7db8", "sighting_of_ref": "indicator--f53d3058-9b20-471c-b345-1cf02745847a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a8bd88-836a-4bac-a358-468fa611a306", "sighting_of_ref": "indicator--4596f407-e4e7-4695-8bbc-bac7869a2186", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e93e66b-9c5c-4567-ad67-55e84c6d6b58", "sighting_of_ref": "indicator--7cdf5bce-5807-4fc2-9db1-07ba7fbd2790", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013e5142-b80c-44fa-9ad6-d27c393c3f5a", "sighting_of_ref": "indicator--c0507169-4aff-44c3-889f-a7400bc3df86", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c973677c-16a1-4c56-af0f-ccda50446eac", "sighting_of_ref": "indicator--4ce8351f-c090-4503-ac16-b1a37b07cb9d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a3bc47-d4da-4044-9519-696223f1d0b3", "sighting_of_ref": "indicator--b5c4a5e0-e2c3-43d5-9fa2-84e93c55241c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c86e1d3b-2ca4-4983-9007-deba47f6ad63", "sighting_of_ref": "indicator--81da4513-77d1-45d2-91f0-7576a8218d51", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6bf771-97db-4c76-982a-5ae767ebeae0", "sighting_of_ref": "indicator--49dff1fa-14c6-4163-80fb-7185ba3d1e5d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d30959e4-a056-46a5-b470-a4132d2b6e0f", "sighting_of_ref": "indicator--252b4140-4ee6-496c-898e-3e5712cbad2f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a015df-fd2b-42fa-b9f9-218c80bcd85f", "sighting_of_ref": "indicator--e2986c3e-36ff-4796-a1b3-05590d3a5e63", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c8ac3f-4c6f-412f-9485-837fe90fdcee", "sighting_of_ref": "indicator--a20fe9d6-695b-4859-9c48-f3c475bcf840", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa9af5e-1e6f-4e62-92c5-acdf10a4e0fe", "sighting_of_ref": "indicator--65d69c05-9464-4bbe-86d9-599515dcb6e3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e32a607-9b06-4793-8358-e268d7f97e7a", "sighting_of_ref": "indicator--8fa41884-3f8d-4eee-946c-086ce7972aa5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63dae0b-7339-4089-89fd-4b0757a84d12", "sighting_of_ref": "indicator--76e7d9f0-bc77-4cae-96b2-18cc23349f13", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d3f347-ace4-4953-9175-e5fa67eaafb4", "sighting_of_ref": "indicator--cf8f8ec1-6dce-448c-a29f-fd0d1338c430", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c954c2e-adb7-4964-953f-1a5ed6f07059", "sighting_of_ref": "indicator--27632bed-ceaf-4c29-9845-c0ab1e14c03e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c35cfe32-152f-4d0f-9e54-5486fbf55518", "sighting_of_ref": "indicator--d7cc1c28-f923-4b09-8500-77c3521b4bdd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc8e1996-d70d-428a-b413-5e5d32066e80", "sighting_of_ref": "indicator--4c98cd12-51e5-41a2-ae6e-f828863cb88d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fa1e12-e8d4-4d17-a4e4-549eeb6bd878", "sighting_of_ref": "indicator--f0c2db2c-b55f-47b6-9a25-e6537b58cc9c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa8e0a4-8e43-4ddb-90a1-65d54eac0388", "sighting_of_ref": "indicator--fd4a7389-b7e4-49cf-ab6d-befc00cd4813", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a5ce133-e8ad-414b-b00b-fb4228e2df31", "sighting_of_ref": "indicator--b61211c5-86c3-44e4-94c8-8bf63fccfebd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a091ac00-de7a-4549-a6c5-cdc34fc6bcf2", "sighting_of_ref": "indicator--5e6a6e77-66e1-4c0d-9633-004511fd9a32", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def1cc7f-76d7-4ba7-a4ba-600575c31e00", "sighting_of_ref": "indicator--94d852c6-b820-4b9c-97f7-912ce4fda0da", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3a111f-18d9-4ed8-b4e5-ddbc305f7659", "sighting_of_ref": "indicator--a23c5c51-9a4f-4787-b606-d50076cc93b8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f9f4f9-f9c7-4bbe-963d-907d7f013b44", "sighting_of_ref": "indicator--08ce5785-42c7-4813-af41-1cca832dd316", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b632c0-7aa9-4a3c-b64b-0df71756fae4", "sighting_of_ref": "indicator--084b831d-a00d-4154-9bc5-65a126ab4f0f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ac146d5-56e0-4914-ae1f-09844d450745", "sighting_of_ref": "indicator--84638e97-7d14-4b5c-91e1-8e6fca083aa9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47db2e2-8d3a-4cc7-86a8-c00ca2abc722", "sighting_of_ref": "indicator--b9c60a38-dbcd-4f51-b67a-9b9bcb896562", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb32d6fe-5145-4267-ac6d-66fddbd613c4", "sighting_of_ref": "indicator--c50a063c-68f0-414a-be01-5010d30674ba", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a451ff8-eef8-4b6e-bd90-c313d9bc4a08", "sighting_of_ref": "indicator--e23e9e7c-fcc0-4e3e-b2c2-58c68daa184c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5255c6-9540-4fd2-b9f0-ea8cb5393aa7", "sighting_of_ref": "indicator--6596a2b2-5b80-466a-bf95-878671eee4db", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5459b28-bfeb-4c40-a084-17fd276c121a", "sighting_of_ref": "indicator--5e7ec206-8fff-4db7-bc6d-4a08c153865f", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360f391c-b080-411c-bf8a-3d9250b6f617", "sighting_of_ref": "indicator--db4a3686-bad0-4c01-b780-d29ca2ecf2a1", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--809c4c22-3b85-4ffc-9bdc-a88c01f1d5ec", "sighting_of_ref": "indicator--69be4426-8a2f-4fbc-a662-7f161f243271", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0087489c-56fc-4361-a886-a0dc9e640103", "sighting_of_ref": "indicator--69be4426-8a2f-4fbc-a662-7f161f243271", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4ea366-1e99-46d4-b738-7a68e5e38759", "sighting_of_ref": "indicator--69be4426-8a2f-4fbc-a662-7f161f243271", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c37953-55bd-47ec-a8d7-ab4532aa1ea8", "sighting_of_ref": "indicator--69be4426-8a2f-4fbc-a662-7f161f243271", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529be987-d829-467b-9d6b-f5135745898b", "sighting_of_ref": "indicator--2249ab22-c68b-4a80-8a95-6786788b2abe", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51fdada0-a36e-4ca6-b0fa-ba95722810a0", "sighting_of_ref": "indicator--2249ab22-c68b-4a80-8a95-6786788b2abe", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a347da4a-0e47-4462-afa1-d773a0ccce71", "sighting_of_ref": "indicator--2249ab22-c68b-4a80-8a95-6786788b2abe", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14cbb9f1-d5ea-405b-94c6-ce90070308cc", "sighting_of_ref": "indicator--2249ab22-c68b-4a80-8a95-6786788b2abe", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--342080ed-5c02-4182-bc91-deb7a02cdab9", "sighting_of_ref": "indicator--cf4f61c6-9944-445e-8cb6-36566e6b64e2", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03a3afc-83f3-4ae9-8fad-be9a6e02eec1", "sighting_of_ref": "indicator--cf4f61c6-9944-445e-8cb6-36566e6b64e2", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--320b8bd9-cf1d-4045-9d4b-cd290549e2e1", "sighting_of_ref": "indicator--cf4f61c6-9944-445e-8cb6-36566e6b64e2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb287e72-a6cc-420e-a68d-423a41666005", "sighting_of_ref": "indicator--cf4f61c6-9944-445e-8cb6-36566e6b64e2", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9fd92c-d3e8-424b-8326-a098434b54d0", "sighting_of_ref": "indicator--09a76511-51f9-4ffd-a833-72e5386786c6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07416c18-eb11-435f-8f7c-4f40a4c62fd0", "sighting_of_ref": "indicator--e1c5293a-8ecf-4177-aa47-25f308bdbbe7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb0fd5b-50e4-468b-8f02-cd888b592950", "sighting_of_ref": "indicator--fe70f2f2-b7d7-40b3-bc69-f986913c549f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e22dbd-0c1b-45a7-8d92-f6cc5ee865bc", "sighting_of_ref": "indicator--d5b6347e-0be7-432d-9658-e521a8c9c8e8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386607ae-6ecb-4a84-b68f-f433da59e6f2", "sighting_of_ref": "indicator--2b6c3049-77d6-4adc-ac1c-5f4b4eeee72d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fed8132-d9a8-4df1-a871-728754bafa73", "sighting_of_ref": "indicator--fb82cf2a-220a-4894-b616-4473895d9b60", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eda3c4d-e39e-464d-8a5e-c1a3494d7d4e", "sighting_of_ref": "indicator--a78d310f-68dc-41aa-9269-ea5a15b7e532", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00b91fb-e654-4da2-bb6c-0290e3c664ec", "sighting_of_ref": "indicator--42bbe532-8cf5-4189-b220-ec8895d625af", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f860fdf-2e56-481f-989d-2094bd8d1b25", "sighting_of_ref": "indicator--54921fbb-133f-44bd-ade5-2ab7b73b9107", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e667e6-4196-4615-8b82-787ef362c2cf", "sighting_of_ref": "indicator--b1be2086-aa9b-4264-8d33-57702a9ddba1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--684a4d00-ad98-4da5-a768-ef37b02e55ab", "sighting_of_ref": "indicator--065c580e-ada7-442d-bdb7-75b7caa7258d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958feb93-a99e-4189-a0f6-bc0d2ff5c26c", "sighting_of_ref": "indicator--e819baf9-6a11-4673-9472-637750ff5d52", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68642c4f-e773-449a-8082-82a88f465dc5", "sighting_of_ref": "indicator--2a9af692-b857-4c1e-9c2d-8c02bca543f8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63595b59-3faf-4106-b0c6-4b12df35ae0e", "sighting_of_ref": "indicator--b7def460-fdd7-4b00-9069-469445d55367", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb871cd5-40e9-454f-b4f8-399ae2fbb934", "sighting_of_ref": "indicator--f62f3df9-e573-44b3-a2b9-0477da7b09c9", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f66289c0-72bb-407a-9ce5-a28a3b2df05e", "sighting_of_ref": "indicator--5edfd64d-e1dc-40be-be10-440a8dbcfe55", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ba7867-553d-4e2a-97b7-6430f71ef6bc", "sighting_of_ref": "indicator--7f8160b7-f71f-4292-a0cd-23043efed9ba", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea9c9b9-9303-4aef-a344-8621dce70c8d", "sighting_of_ref": "indicator--93c33968-f424-479b-9589-da7da190aada", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc4c94fb-cee1-4911-b55f-ab442b9bf07b", "sighting_of_ref": "indicator--73f5dfee-95da-49c5-ac63-e6be0975b26e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f72262-b04a-4841-bcb3-0210c8c57985", "sighting_of_ref": "indicator--f383271f-05ac-49fb-8af5-3a0edc0d2deb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25950063-fafc-4575-ac16-d4a440eaf141", "sighting_of_ref": "indicator--3b2ce7d6-9293-40a1-ba69-2e80f4df73d0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6be5c76-5a4f-4c98-98e3-5ec5f057246e", "sighting_of_ref": "indicator--61604cf6-e337-4c0b-bf12-5b5a3301af52", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f66a236-bd1c-4327-95ac-a3571c1d2d59", "sighting_of_ref": "indicator--ef5ad1aa-f617-47e0-9e52-6d604a82fd13", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ebc7efa-2350-46b0-9e36-7a6b78f16154", "sighting_of_ref": "indicator--a61230bf-0e5b-4746-80a1-5a383d1a71cd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde8374b-a302-48e9-8f64-a7b758fcf9a5", "sighting_of_ref": "indicator--cf1040a9-3415-44ab-ab9f-f2352ca208c9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58b096b-fa94-496e-a017-1e8fecdae652", "sighting_of_ref": "indicator--e9fcd2e4-85ea-4786-9d7a-bfea406a2e84", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd84b33f-e045-4c6e-ab66-f6f70e4dcec0", "sighting_of_ref": "indicator--e1072c0e-6158-4fea-94bf-79afb293a76e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d80eaa-a717-40c9-9b84-62731cea8be7", "sighting_of_ref": "indicator--64eac41a-2027-4753-a2ca-27786faa24e1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ddc9ec-5fcc-41fc-918e-dadf64a387ba", "sighting_of_ref": "indicator--1e0f1e74-d804-458e-bbba-159e0da20c84", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3adeb004-d60a-45d5-8689-6677344004af", "sighting_of_ref": "indicator--4fb9f5f6-8fc5-408b-8c91-145b3e0eef90", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74bcd8b6-28ab-4194-b604-39b72d526ff2", "sighting_of_ref": "indicator--2c9d37d9-c75f-4f40-8d7d-fd0961c84ec2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24aad5d-681a-4717-b1d5-736b42ff1008", "sighting_of_ref": "indicator--a8302ae5-b27e-49aa-bc8a-38438c79cb39", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--152828e2-2274-4e74-977e-ac8d15879575", "sighting_of_ref": "indicator--fb557b44-f514-4c79-8ae2-3564678ef8dc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22224a2-7ed7-47a0-9c74-f4bab6db4d63", "sighting_of_ref": "indicator--f6d935a2-122d-4094-86d1-b64b7ba25953", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8735f66e-d6cf-484c-9c93-f2c5e1b1641b", "sighting_of_ref": "indicator--3154882d-365c-456a-a231-43388234f2c5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2fc21c-c3eb-4cf3-9a79-146a7b3f2885", "sighting_of_ref": "indicator--4d3de5ec-74b9-4ad0-9d29-d38a326d56e4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1044bf55-93b2-444d-8c64-96959e3a155e", "sighting_of_ref": "indicator--28f8380e-5500-4c0e-898a-a1244dabd726", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c024f0a-c41a-44fe-b1ce-974fb409277c", "sighting_of_ref": "indicator--7c29fc8b-3584-4dcb-9453-aa78d2d38776", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d268f0-4ad3-4e67-b5a1-cbfd234a13cb", "sighting_of_ref": "indicator--dd6a0258-e125-4e9f-a969-55d6418d256f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be71c51c-3f6c-4754-bb61-83c87e8ba22f", "sighting_of_ref": "indicator--ca2ab3da-494b-4ce2-b456-5d41ff54abb3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f523280-b99a-4117-9dad-8f1286662e9a", "sighting_of_ref": "indicator--5da482f5-af05-46f3-b8d4-cc36d45855f1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7004403d-51cc-475a-a049-1efecf00a3d2", "sighting_of_ref": "indicator--9128965b-1a26-47c2-905f-1fccea9de0ac", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf8740a-55ee-4079-871a-8837a08b2458", "sighting_of_ref": "indicator--41d7a242-8772-471a-b08f-d11767b12d10", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d520ea-1b80-4f41-b663-e80696918554", "sighting_of_ref": "indicator--75552fb8-8dd6-4fa9-bbf7-86f1f2697756", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7a8be3-a70e-43eb-a5ee-403b661fb1e0", "sighting_of_ref": "indicator--d279c513-be5c-4d44-84ba-94f85c890c89", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea8641c7-a76a-4876-b9d7-b9e020076b41", "sighting_of_ref": "indicator--08343898-cfb1-4e85-967c-d87dcfc832a4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8b95e6-1796-4070-a2cb-7a249bfb38a2", "sighting_of_ref": "indicator--d388a09d-1ac6-40c4-98e1-1a52927226b1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78baa2e9-10f7-4707-bda1-b97accf77c64", "sighting_of_ref": "indicator--c2446a11-3fdf-48a5-86e5-62b5f16ebb47", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2daef9bf-ca53-4cdc-937d-ad223c5a2086", "sighting_of_ref": "indicator--310fa16a-56d0-4418-9518-12de3c01e344", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2e072f-a92c-47ea-93f9-6e7e721898d9", "sighting_of_ref": "indicator--42d5e8e4-5544-4016-81f1-c83a5bde1c0b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f39fba-a3d1-41a7-b982-46beedf998af", "sighting_of_ref": "indicator--aca62943-0660-4741-91b9-283eb855021e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada4849a-5d5f-4e8b-81a8-b7e0463c6bcb", "sighting_of_ref": "indicator--1d0cd22f-ee0b-44e6-a1d5-85f4b87aaed1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2597879-9fa2-4792-ba57-9b5e801754aa", "sighting_of_ref": "indicator--3582911a-98ff-4478-a2f0-c4c574c9999a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c78dda7-78e3-4c35-8064-deb4ce5632fe", "sighting_of_ref": "indicator--e7635648-e7ee-479c-a21c-7d8192f478ed", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--124e3d1f-db56-4bc0-8701-80d093c010f5", "sighting_of_ref": "indicator--f6ec3e4a-49b2-4aa0-9919-8cff6b76b4b1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f759e7-f935-4383-bcf4-8701e8495090", "sighting_of_ref": "indicator--482bd9e3-aad1-4771-a1a0-0b3ac305b840", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3834dfb-3e73-452d-9d0e-c9c7df3057c5", "sighting_of_ref": "indicator--4e0499ec-788f-4490-a3c8-f1a4ba641100", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7de6368-115a-4c32-af62-bf18c8880cf5", "sighting_of_ref": "indicator--80e0cad0-80c8-4ee7-9e29-31a51fb17448", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b4c031-0e17-4201-8298-87509c46c1ea", "sighting_of_ref": "indicator--4a1dd940-51cd-4828-bf12-d9bf5e83376b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ffde62-5f57-4c97-ab54-30909a545d27", "sighting_of_ref": "indicator--bb3c818f-36c2-4533-b576-d52abe778838", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a38c615-3680-4a83-8fc0-7974f50c601c", "sighting_of_ref": "indicator--0e7ad91d-b881-4538-81c6-c5bc6b32fb62", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329b1307-fda6-4010-a8c2-76bbb59de438", "sighting_of_ref": "indicator--b678d659-844c-402c-b6d7-7ad92aa31102", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a788d78a-b5d6-421d-bb62-8dcb86f20eca", "sighting_of_ref": "indicator--495c70f1-b70a-4398-8038-16dce7533ebd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd640c9-d4cb-4f23-bd88-46dd7f5dd40b", "sighting_of_ref": "indicator--2d1cb5e4-d48a-451b-8910-9b4a2fda3d37", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af45876-519d-4366-a378-62e77126bf33", "sighting_of_ref": "indicator--a3df74a5-5b46-4818-83f7-c415ac2ce718", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d2c39ef-248c-408c-bab8-84a37c0e5c19", "sighting_of_ref": "indicator--5bf7898f-84da-43d2-b2b0-17ae461c3f83", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa6bae8-0983-4b3e-8753-e82f1eaa49f6", "sighting_of_ref": "indicator--c4b9b5ab-df0c-4183-ad42-c8dc36cfaec6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5783dbc-e2f4-42ea-bd6b-4906cef81c5b", "sighting_of_ref": "indicator--e3a19fa4-18b5-4a42-b29c-cc58f8ecd824", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a294fa3-2760-476f-8d92-b9ee52c79dc8", "sighting_of_ref": "indicator--549c8e14-5b35-442e-8c6d-6fd21222e860", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411df3ea-5f43-42c6-95a7-87794b4c7537", "sighting_of_ref": "indicator--571abb1a-5cce-4c24-afb0-ebe192ee18cc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14dedbb1-90be-4e6e-9ed5-c722f9c088fd", "sighting_of_ref": "indicator--95bf5720-207b-41c6-a670-c840d4f3ce26", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c044414-41be-4415-b287-5e575d50e103", "sighting_of_ref": "indicator--8df30b8b-929b-485f-b10b-2eef49c40235", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--039c3a33-4cd5-405f-8548-7a1819cbaa1f", "sighting_of_ref": "indicator--241f0f56-03bf-4276-b32a-933dd67c528d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7f6bc3-8a0d-43e3-9add-5884d75fbe36", "sighting_of_ref": "indicator--6d15f1c0-5676-4545-8cd6-7f6ab857bc1b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4d8cc7-1aba-489e-9189-8742d1f154f9", "sighting_of_ref": "indicator--c38bffe4-2eca-4363-8f8c-9b77c5c9fe5e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09aa3e99-098c-480a-8cc8-fc619294de8c", "sighting_of_ref": "indicator--27b4441a-7468-4bf4-8075-19b6cfb7019b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239a0e79-e23a-484f-9482-b617235477a0", "sighting_of_ref": "indicator--f0713907-9f05-452a-aa11-d8825a626be5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a09699-3411-4208-a6df-be6840574f05", "sighting_of_ref": "indicator--bba42d3f-5e78-4d7f-9f37-ab6842f68a1c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0496e85b-6c33-42f3-bc62-35673dbcd26b", "sighting_of_ref": "indicator--a03463ee-5e2e-4582-982a-6f4180dd9526", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59c42c8-7da7-4b4c-8958-10857882b4cf", "sighting_of_ref": "indicator--63ed14a6-d1cf-4417-a950-564f4ca5ac4c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31483476-706c-4be1-affb-e04314f32691", "sighting_of_ref": "indicator--fb1854c2-9f4c-4077-ac8f-fb619f42e317", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a0a661-8669-4ae1-bc35-6589aae88959", "sighting_of_ref": "indicator--dec51f8c-c294-4ec3-ab84-6387cd91643f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0af359b-0ac3-41ac-a316-3b2473ef2187", "sighting_of_ref": "indicator--97c72ee7-8f05-432e-8513-4a4a4da24d54", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c54ca3c1-cc7b-48c4-9c24-a03554d82278", "sighting_of_ref": "indicator--501232e0-f145-471d-998d-da2e8b948f8a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1d8ba9-683f-46bc-891a-b58bbe59eb11", "sighting_of_ref": "indicator--682c932c-86f0-409d-9b6b-89c4dc8af0a6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33f1963-0c13-4334-9c4c-b99587817b2f", "sighting_of_ref": "indicator--9b63e249-916d-4b57-9246-b0a2de84fa59", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8eba0a6-136c-4dc5-93cb-5d0569859c42", "sighting_of_ref": "indicator--1a7865c5-6033-49b7-8a28-d2a92bc63210", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dce85a2-5b73-4486-9ce6-54c3b2f640c7", "sighting_of_ref": "indicator--f3ab0a09-3ebe-430d-9196-47bbc53d32fd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a5aa77-9348-42e5-a200-a109dcac235d", "sighting_of_ref": "indicator--12dd077f-6589-4bfb-b8bd-5406523aec2d", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c34b535d-051a-4032-af49-d38f77e5decf", "sighting_of_ref": "indicator--e97e6df5-ba81-4e80-a05a-f570077cf7dd", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e6593b-6aa3-4c64-9af7-bd865b9105b4", "sighting_of_ref": "indicator--a054593c-c542-4cf2-80c9-67a195a37333", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15701c9-984d-4d39-a4af-a90fb3707532", "sighting_of_ref": "indicator--99bbff55-abc6-4902-8100-4ca2fb237558", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd90684-25fc-49f6-9156-bdd03d3f0538", "sighting_of_ref": "indicator--99bbff55-abc6-4902-8100-4ca2fb237558", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adbd077a-8546-4b2d-8ed0-564f5ee0856c", "sighting_of_ref": "indicator--653fd360-22d1-4d84-8720-837f7a1cec42", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1806a7-cca2-4c9a-90d3-c3636704375c", "sighting_of_ref": "indicator--653fd360-22d1-4d84-8720-837f7a1cec42", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f1c2d45-4f59-40ff-8b8e-9712b3b0d95d", "sighting_of_ref": "indicator--f8390429-68f8-41df-850c-0088bd8e2bd6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e709fd71-016a-4dce-985d-531ef7ecf510", "sighting_of_ref": "indicator--110c028c-e9ae-47cb-b036-d722cf4e1089", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261180e7-a651-4773-8616-d00197e4ef69", "sighting_of_ref": "indicator--d0ab99eb-3daf-4c53-b708-0651d3da0e78", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d344d140-c06f-4fbc-9e25-9bf3e6416147", "sighting_of_ref": "indicator--3589716c-de2a-4726-8321-89a85762cf82", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b06c7e5c-a23d-440a-8eaa-a2426032d2de", "sighting_of_ref": "indicator--47aa550c-129e-4cb7-939e-a44e9fafad17", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995c90cf-939b-4ae9-92dd-52d75df03766", "sighting_of_ref": "indicator--7b9bc1b8-faf3-4c65-bc29-3a5d1e9795fe", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66033d89-ac64-42a3-8c70-1963fb23f6f8", "sighting_of_ref": "indicator--96df9199-6622-4854-acf1-266a51687c4c", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d896362-f87f-4787-b9c3-4d1ecf9ab9d8", "sighting_of_ref": "indicator--10ce45e0-9ec8-428e-a513-b309de5f5793", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--443ca32d-0dc8-4767-8c6b-d14c3d0f7d48", "sighting_of_ref": "indicator--36f8733a-af0c-4d1f-866a-fa914d3c9439", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2cb71e-bc01-4a73-969f-3b373dc8ba6f", "sighting_of_ref": "indicator--acf20990-d4d7-41fe-a141-3b253f244823", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b81632-ecc8-4e0b-87b2-9edda43c56b8", "sighting_of_ref": "indicator--f007308a-8d22-4178-9065-7f4daed0c413", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b559bde-ca8b-4f57-aab8-bce08c8b5dc8", "sighting_of_ref": "indicator--a7239aa3-9ea8-4ecc-91d6-bb0376a3d2a5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d805f814-d8e3-4f25-9a53-5107b89f3893", "sighting_of_ref": "indicator--42a27211-265b-4198-a798-1a1f6be84861", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745185dc-73fe-44a5-810d-a3ae165ec27f", "sighting_of_ref": "indicator--ec199feb-94b2-42a6-8db7-cb8c97c4d121", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7cbf244-f549-4aab-96d8-fac6f9a8f9f8", "sighting_of_ref": "indicator--2177a396-7e84-4dd6-9650-0624cc3a8665", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa35ff6d-f280-47fb-a623-7aa9401ed4f4", "sighting_of_ref": "indicator--668e4205-c178-44ed-93c3-1041f981df97", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da698cf4-e6c2-409e-a22a-c0bdf4b4f3e2", "sighting_of_ref": "indicator--66b35a99-75ab-4108-94d5-98270e5e6f8a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b9a1572-36ba-4e60-a87f-c2275133364c", "sighting_of_ref": "indicator--c9711814-80e3-4223-9250-27552660ef48", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba30081-bd66-4b14-95f2-ec2d9e2791a8", "sighting_of_ref": "indicator--d613a004-7672-4e83-8bd9-48861462c864", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca015ead-cb38-4b46-a5c2-c616be8c2e0e", "sighting_of_ref": "indicator--c3cfb52e-5437-4b4c-bcae-ebd790f7ca5d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437a502c-6f4e-463e-ba99-d6720b4bf74c", "sighting_of_ref": "indicator--7c0b740c-7eab-4a27-a08c-f1b25b3635f9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d52e84-56a1-454c-9105-2cd494e0023f", "sighting_of_ref": "indicator--6769639e-f78f-4437-9455-86dbc1682016", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba7c2fdc-56ce-411e-ad88-24e9ca840410", "sighting_of_ref": "indicator--d32c0462-b7d0-42ac-9508-9e2b6d017989", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c409607-3f01-4820-9ceb-fcb748ef9a43", "sighting_of_ref": "indicator--a3b41fd3-abcf-4871-8e21-8d4b8906cf18", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--604bff57-9e54-4229-aaad-21786b167da7", "sighting_of_ref": "indicator--9ed2353b-2827-4a85-aebc-f2b76da94ee4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3201041-4a7f-47de-ab62-c1b5f50dd3d3", "sighting_of_ref": "indicator--d4e5675e-5148-489a-9b62-165261ad7d68", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b83985-2249-44f5-845d-ffdefba22921", "sighting_of_ref": "indicator--b6922b62-adba-40a3-9efa-76c2d645624f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4079367d-f632-46dd-a404-8fefffd9026e", "sighting_of_ref": "indicator--fcebd1dd-75c6-4158-8e52-1799f4a50411", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7525d19-7b05-4c6b-85b1-2c46850d74e9", "sighting_of_ref": "indicator--4b26c040-3121-4345-878a-74c5c2a406c3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a46f3e0e-4d02-40be-b232-cdb2a4854321", "sighting_of_ref": "indicator--f06ad58b-af16-4671-bfa3-a923042ef38f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d2a720-2ff2-468e-a414-ca22dc61a8df", "sighting_of_ref": "indicator--8adac15c-2dd5-479f-95a2-bb34f4a9b89a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a10bd20-2753-4fbc-8bd1-4bc1c06fdae6", "sighting_of_ref": "indicator--96faea25-5bec-4e1c-a32e-9e1403362045", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51249fa9-02fd-4d9b-9485-1ee90ab43e33", "sighting_of_ref": "indicator--dba0b888-9a89-4289-819f-65b7e0d1f548", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf2c5af-f83e-4970-8f5b-8f69f4cbe498", "sighting_of_ref": "indicator--889640c5-d3e1-4976-a337-c52d0f86e954", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ceff74-7b11-491c-a662-a128ac49ed2d", "sighting_of_ref": "indicator--f57b5a6d-c4e1-4998-93e2-e01d729c3fe9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd66ff1-46bf-4d9f-aea2-20ff55498fdd", "sighting_of_ref": "indicator--cec2d335-6c14-4f43-bbf8-803894c64c37", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86fb9a57-2543-4c1d-b2d3-cd59caef6911", "sighting_of_ref": "indicator--ddfbc417-8ece-4987-9109-9cefbb29ed98", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58123d07-18c2-4e59-b85c-b88588b1c12c", "sighting_of_ref": "indicator--4704b454-44ce-4190-848b-c218ae42a917", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d32fe3-abe8-4712-9116-dde1ad7f53f6", "sighting_of_ref": "indicator--32e1b2af-bce2-410f-9c22-e9ccd5813c81", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd0b4dd-f19a-44e9-bf09-5931762bfa8b", "sighting_of_ref": "indicator--1b36f84a-1bb5-4abe-8cbb-06e8f3204218", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e3323e-c8ae-4668-a0ef-55472b078f55", "sighting_of_ref": "indicator--50cef3a7-2d20-4cd8-9b46-d7e409435411", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64cc51a9-2a69-481b-b772-5b4324e03845", "sighting_of_ref": "indicator--39099929-1306-4c56-ab8d-59f7cef71f49", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4a2147-6eaa-41a7-bbd0-65ae65236564", "sighting_of_ref": "indicator--6fb2d45c-4119-4862-a6d3-d61fbd25d0b5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d44b0e11-4b8a-4ae1-baa9-5e9fdc22e7cd", "sighting_of_ref": "indicator--69176c28-aba0-4b69-9ef7-494129d6924d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a77e99-42f2-45c7-855c-fea3035ec1f5", "sighting_of_ref": "indicator--f24860d9-5ba5-4670-b757-3f6e75581cbf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2dfb04-6d08-4eee-943f-ef24d034b319", "sighting_of_ref": "indicator--c014dd02-4cc6-44e1-ba1c-fe4a869d4109", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21485ed6-268e-4e43-9ef0-bbbaa0bbb2bb", "sighting_of_ref": "indicator--50874b60-1b51-4680-a83e-f2ce9ea53df5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1de013-dd4a-4ecc-afae-15aed51dc5bb", "sighting_of_ref": "indicator--3e49e980-a58c-4f2e-a770-7a3331290669", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb6961d6-0df1-44b6-8da7-871197fda6d7", "sighting_of_ref": "indicator--c1e9e4cc-b9be-4f64-8595-82baad9baa55", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7ca968-8e9f-458c-82ba-056d85406b18", "sighting_of_ref": "indicator--d7694b28-3fe8-448a-876f-66969a523b49", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--051825aa-818b-4184-84af-826e4175134d", "sighting_of_ref": "indicator--9785ddb6-5e41-4b9c-946b-42e049b68f58", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99066cc7-532f-4d15-b973-3372f3bfe2f3", "sighting_of_ref": "indicator--b99180f3-5cb6-45b0-b4db-f1a02e207c5e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb237e64-6fa0-47fc-a7f1-d2d61ca5969c", "sighting_of_ref": "indicator--a3f9b53d-b501-48a7-a47a-73a6a138c903", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274684ca-5f35-449a-9320-181ba8cda48b", "sighting_of_ref": "indicator--4e11de5b-d90f-4309-a821-7fb91e647723", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1a0c5a-90b6-4b32-a97d-22164f9cb174", "sighting_of_ref": "indicator--9379466e-44c0-42a1-b0b3-8aade8a7a132", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de85375-f404-48d7-85a9-f4613e43a33f", "sighting_of_ref": "indicator--c68936a3-3d45-4425-809e-097e56299d51", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6b77ae-cb26-4632-b407-316dbfd27af9", "sighting_of_ref": "indicator--53afc75b-d3db-4fc9-9613-a85b9618180e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1420f597-487a-4fb9-8dbe-06c2ef0ecfec", "sighting_of_ref": "indicator--e8b313eb-41ba-4a29-a001-fe2c6e32d41e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3719d616-5dc2-4dfb-b863-e549e72c532a", "sighting_of_ref": "indicator--629db91c-4cd6-4772-84f3-98880b2cbe41", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb1380a1-6a40-4cd0-9371-da5a04e10d3e", "sighting_of_ref": "indicator--b02d46dd-b596-46a0-a5a8-5770c2ac896b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ee0876-be31-4fdd-a267-05d1c82d43df", "sighting_of_ref": "indicator--4c436aeb-3305-455c-bae9-94985055d49d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37611837-7769-4067-a41a-c2332d368be8", "sighting_of_ref": "indicator--8c6012a4-255c-460e-aacf-26fa424f6f33", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ae93a4-c628-4029-8543-8bc66991c59c", "sighting_of_ref": "indicator--098688d2-cfdb-4c53-855d-fee8a36598e9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f02ae7-7894-455a-8b99-9442c9dd9c44", "sighting_of_ref": "indicator--7d1b94a3-ae42-44c3-a871-52edb473bba2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d37f9a1e-5f7b-4b00-9524-709d750ed83d", "sighting_of_ref": "indicator--f0a053d2-d7a4-49ff-ba38-c750d5cffa9f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9ff87f-496f-4ce5-a1ed-b1b07a6b4358", "sighting_of_ref": "indicator--be84a7b2-4bbd-4692-b5cd-b091b1cb25ce", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32484965-dc82-4ea5-a0d3-f91b6bef3b55", "sighting_of_ref": "indicator--0f66bfc7-91a9-461d-868a-0677e4bd7af6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385dcddb-f9f5-40b3-a64f-d2c3785492f6", "sighting_of_ref": "indicator--aa58441f-971a-4dc9-82e7-deab2ed20821", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958df492-d0f7-4d02-a3d4-afcb6d026be5", "sighting_of_ref": "indicator--8ef0a49c-7680-493c-b91d-5c6545cc0510", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d593517-c1a8-4c11-bf3c-cfde89aa1221", "sighting_of_ref": "indicator--98a19d4b-6326-47cb-bcb4-6d3d47945ba9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897afc85-0257-48ad-8d48-534481f62525", "sighting_of_ref": "indicator--b58c6f8e-2f5f-4c1a-ab3f-5dcc9ecb784c", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1523c73d-f2e4-41d3-ae0d-fc1048d6f15d", "sighting_of_ref": "indicator--2350799a-5bdc-4253-a927-cbc930622b7b", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a7ac2b8-e14f-473b-aea5-1337774461a2", "sighting_of_ref": "indicator--265041c5-947a-4e46-ae62-085586f6b27b", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5032b96-7c6c-4c0a-b6c6-d29eba3b6e1b", "sighting_of_ref": "indicator--450111ef-e348-4326-92e5-619e05fcccc1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b3058aa-6166-46d6-a785-2d779ee0d23c", "sighting_of_ref": "indicator--85eb9489-d9c2-4522-8d8e-e80ab606d828", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1906557d-9f5d-452a-9398-a68d0fb2dc3f", "sighting_of_ref": "indicator--3a081d59-6087-46a7-a696-a519ad235463", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ff4a57-4dd7-4632-b89d-e8c7fe4bd649", "sighting_of_ref": "indicator--3a081d59-6087-46a7-a696-a519ad235463", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eea08667-d14f-44c9-8861-0aca7177b3c1", "sighting_of_ref": "indicator--64456c7c-9ef3-4eb4-a8ab-fb74e0e69233", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--971516c5-5e8b-46f4-ae8f-db49517f250e", "sighting_of_ref": "indicator--64456c7c-9ef3-4eb4-a8ab-fb74e0e69233", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad654aa-ba17-42cc-a72b-c4f13d3966c9", "sighting_of_ref": "indicator--eb5f52ef-d286-4785-9ec5-ac3f8386165e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80948311-cb66-42fb-b410-ed244af24f58", "sighting_of_ref": "indicator--9e547b16-821b-4413-b7ea-0851162fb6e2", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba87ed75-0884-46cf-a51e-4f738912f76c", "sighting_of_ref": "indicator--9e547b16-821b-4413-b7ea-0851162fb6e2", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2c450e-070a-4c94-9d8b-0e3c2fda8c03", "sighting_of_ref": "indicator--a69448cb-c36a-4a34-ba16-0975b5adc17f", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4adc3a3-f302-4a44-99f8-551103877e41", "sighting_of_ref": "indicator--b0ba6458-48d6-49fe-babd-36d280715026", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c0465b-c48f-4165-976b-e5d0d34f3197", "sighting_of_ref": "indicator--99d78ebf-b296-4a0f-b094-1a021ff45af3", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f486ea82-c607-4ea3-b2e1-4d97fe5a56b2", "sighting_of_ref": "indicator--22a35da5-ffb5-4c90-b0e6-779b9ff50bd4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d78ed24-abda-40ae-89f5-9d23eac573d5", "sighting_of_ref": "indicator--910d20c0-5879-46cf-a3ca-2646220ac1a1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9deec4ce-7fce-4869-99e3-111c8a278bf9", "sighting_of_ref": "indicator--25095ae2-be99-4d06-b6d4-6e015c4c9ca3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc737bd2-4a11-445c-9448-2b361c11d496", "sighting_of_ref": "indicator--25095ae2-be99-4d06-b6d4-6e015c4c9ca3", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef9eda7-9e93-4b16-bd20-0054f664a2f3", "sighting_of_ref": "indicator--ed91c75f-a03c-4b82-9f0e-c495c59807f4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5870c3-7f2f-473b-8078-5bae8e8d2bbc", "sighting_of_ref": "indicator--996fceef-5794-455a-a165-b27bbd346db6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--783bb928-a3ab-469e-9cf8-f32e12da6fa4", "sighting_of_ref": "indicator--4c10a7bb-5dc4-40bf-9fe1-98d7b635980c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe34de6-ac4f-4b5c-b3a2-db2587332130", "sighting_of_ref": "indicator--d68868f6-7906-4460-ac08-dbfe10ffde97", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b4b156a-51ec-4999-b3b7-44a63f7a3fbf", "sighting_of_ref": "indicator--cac8cec9-9545-4376-aa2f-eda419d6bb16", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c17869-622c-472f-8c4d-2aa5e6a2eb82", "sighting_of_ref": "indicator--68f4b808-137c-414b-9c43-65853e45c45b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ebc82e-e9eb-4b29-b36b-ca482624ecf4", "sighting_of_ref": "indicator--670deed4-d65c-4c52-98f5-9dcc31a81925", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9010403-4e5b-400e-844b-4244c5b83ea2", "sighting_of_ref": "indicator--198d5ada-2600-4a1a-bd20-b9f3ba0f447e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7541e09-40b3-4e85-a1ad-203469b1bb88", "sighting_of_ref": "indicator--d0b05fff-b1f7-4360-901c-840e7eed3be0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab06754-398b-4130-b214-e99a9fa75fd7", "sighting_of_ref": "indicator--e1d875c6-b1ed-4f3d-81ed-1f49bbda46df", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c23ced9-52a1-456f-9a34-57bd183c23ab", "sighting_of_ref": "indicator--01388f0b-59b0-4faf-9351-7af3eafe6cdd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3abefaaf-130a-4e10-a049-20de8d32077e", "sighting_of_ref": "indicator--f410dc62-4477-4fe5-95db-996314cbfb60", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c19e55a5-d7ae-438f-b1a6-4c4c4ddad9ae", "sighting_of_ref": "indicator--e6e9377a-17b1-487c-bbde-4cd55f7f6f74", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a4355d-5089-4429-9847-b4084c79e589", "sighting_of_ref": "indicator--c3105f5b-0756-42ee-90d5-81b045a832cd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b46754a-cd6e-4654-880a-c980fcce1bb5", "sighting_of_ref": "indicator--2a03429d-4482-458a-819c-69fc342ec67a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3067fe0-25f4-446c-a61d-4ab96f078e76", "sighting_of_ref": "indicator--2a03429d-4482-458a-819c-69fc342ec67a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54960fa-9115-4151-b8b0-09c534624d0f", "sighting_of_ref": "indicator--309ea30f-1c9f-4159-a447-eb4b595177b2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01ffda5-4e10-403f-82c6-9c2d942f0b31", "sighting_of_ref": "indicator--13d8e192-5e14-4534-bf78-3fe1ee96f6d1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f7fe41-8244-43d0-9d61-7acaed6601b0", "sighting_of_ref": "indicator--28c5f107-16e2-4411-a2a6-766a04114e56", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59681fd4-b2e1-4da3-8b55-6c630b7a23aa", "sighting_of_ref": "indicator--bd95fd3a-bac8-4bc1-af5f-0520034333c7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--900451ff-a290-41cb-8bfe-df31c389767f", "sighting_of_ref": "indicator--087d61e3-5ac5-47d4-88f6-d99915b7782f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24accf53-60df-4cbb-aa54-58705f7fa8e8", "sighting_of_ref": "indicator--b4b3b16b-f3eb-4625-ac60-bfe787675183", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4462a27a-3d75-48a1-8e12-759face76dcf", "sighting_of_ref": "indicator--2be43b15-5804-4f3e-bae7-c302a35bc067", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6739bb7f-582b-4868-8717-e4c67873ca63", "sighting_of_ref": "indicator--4641b3ef-08fa-4d77-9cad-c947ae49e034", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b40d7276-0297-4d80-b40a-69d7c3993fe2", "sighting_of_ref": "indicator--4a6bdee0-d899-4fbd-aaf3-d7a64350c0ef", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd3cfd0-ab5c-45b3-bd35-b7d6ac0668a4", "sighting_of_ref": "indicator--422091e9-3d76-40de-b08a-dadabd892fd2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cddc0eb9-12f9-4823-afc4-070144c1f537", "sighting_of_ref": "indicator--76299562-f5c1-40ae-bf91-971ef6c61d2b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c20f8a12-fe99-43e1-b3ca-397795aadd31", "sighting_of_ref": "indicator--b7124e86-f94f-4117-88c3-e6701635f8a2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a273b281-878a-4e87-ab56-17f1630e2016", "sighting_of_ref": "indicator--d4f58265-c939-4d4a-94cd-fa959545988a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c08fea4a-7fe5-4d3b-8b29-9f26289f6d34", "sighting_of_ref": "indicator--06d139ad-fbb4-4e7e-915f-15be42379f49", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48383b0a-c5d6-46b2-9d2b-c77420ff696f", "sighting_of_ref": "indicator--06ddbd27-1995-4559-abbe-335158258a17", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--062f1dda-8b09-46ba-b4b9-ec3b6fccb03c", "sighting_of_ref": "indicator--9974c39a-b0ea-457f-8b74-daa6a71119ad", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40254e53-dde5-4c11-9c13-2ab59a32149e", "sighting_of_ref": "indicator--21e32042-ae61-4788-8116-5ccfd424af62", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393215de-2ceb-4954-9bfe-de78052dd640", "sighting_of_ref": "indicator--9b563fc3-c1c0-45f6-ade7-5906b38f3821", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb0b155d-3854-4cf9-b922-27e04934d2ec", "sighting_of_ref": "indicator--7451b2f7-d4ae-4cd9-bbca-08327a73f41a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02194079-0012-4d43-ab7e-e982e2b845a7", "sighting_of_ref": "indicator--e7d9a5e1-af58-4e54-b6cd-6be64c2e7cb0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b036a25a-35b6-4ac2-98ff-780cb8371d67", "sighting_of_ref": "indicator--898f6715-749e-4a26-87fd-4ca8db043856", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b6b596-499d-43a9-ac82-e156ef862eef", "sighting_of_ref": "indicator--d94f7446-e06e-4a3a-87a3-2a3d5fd5c9c9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4a99ee-8ba9-4349-b30d-975cc2928135", "sighting_of_ref": "indicator--4296443f-5af9-47b8-a9d0-6d66d07a8276", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62fe3ca0-ca3b-4711-a653-adfe94e06e3e", "sighting_of_ref": "indicator--4ef1e04a-17a9-476d-b269-59ba46d372d0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a8ed06-e363-425c-824e-a243fb9595f4", "sighting_of_ref": "indicator--4ef1e04a-17a9-476d-b269-59ba46d372d0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24ba981-3acc-4435-8217-a09316cfd7e8", "sighting_of_ref": "indicator--e4d1f366-b79f-4334-8827-3531fc24ee95", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e38eff3-d39d-424e-abe4-f07db9b1814d", "sighting_of_ref": "indicator--6b1499ee-6593-4c5d-b105-f7dfc66a0638", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab44f7d-64c1-44ac-8bf5-7ee1cfac8785", "sighting_of_ref": "indicator--5ecc64c3-0d9b-4d6d-8af9-37de4b3e409c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--899f8693-672e-4629-bb06-fde630af0dab", "sighting_of_ref": "indicator--1a389aba-f679-4c13-9ca3-12d9e44c8748", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec9208fb-af9a-435e-a323-167300212634", "sighting_of_ref": "indicator--9a21863a-abef-420b-a321-8032c0560282", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d86faa55-b3b6-43ae-acaa-b040cc5fa1ce", "sighting_of_ref": "indicator--2822c015-18b2-40c6-b177-06bef3cb22c6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd128ca6-41b8-4873-a4d7-b28e68c991f9", "sighting_of_ref": "indicator--e0fd854f-21b1-476d-b75f-555d36215703", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e78d52-791c-4314-8dab-c8c17c5ced87", "sighting_of_ref": "indicator--4fd84d40-97c2-45d5-ac6f-60e16d33b788", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4784c97b-ffb8-4632-9cd7-13c673eb3c23", "sighting_of_ref": "indicator--fae7f43e-0993-40df-b88d-173d4235c14a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d40d359b-8498-46c0-a624-996fa0e6e06d", "sighting_of_ref": "indicator--90b9cad5-60d7-46d0-a279-d5745e5bdae5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--608fe260-52a9-4538-b8f9-482cf5efda17", "sighting_of_ref": "indicator--0ad199c4-0786-4a0d-9fc5-70d68b4393a0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd769511-c114-40fd-9742-4c219acfeb86", "sighting_of_ref": "indicator--87236f81-04a4-4318-b0de-976788fae4db", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--465a564c-d05c-4cb0-b71b-fce2e0ab0eec", "sighting_of_ref": "indicator--4d401dac-dad1-4b96-a58e-d77761615028", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--010e74d8-8f8e-4435-ad96-badecd8a33f0", "sighting_of_ref": "indicator--016223b6-b4d1-46b8-b779-a1f8aa12f68a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48858a58-c601-4f54-8ee9-f4997a53453e", "sighting_of_ref": "indicator--87d6139e-850d-46bb-9b0d-4f062a666cb0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11e26a4-df0e-4fa2-ac5a-99235b26acc7", "sighting_of_ref": "indicator--e6c76e63-7f87-418c-b58a-4b983607048e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5edb7132-2573-4bcb-92ae-f6eb2cff3411", "sighting_of_ref": "indicator--c2e6b84d-b13f-47a9-9cc9-491720257e27", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee28bc7e-ee6a-41f1-9259-3094556a17b9", "sighting_of_ref": "indicator--d617b95f-3d61-42e0-9230-8327e639f85f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32c71d4-f2c6-4566-82fc-e80ffc276208", "sighting_of_ref": "indicator--6d319b89-0ccc-4abd-a15e-595f47d00105", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29705be7-ca47-4eda-9406-30212b545052", "sighting_of_ref": "indicator--70d29546-def8-499b-b154-07f254be6ed7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--722ebe8b-7902-453c-a017-368ed3e47a53", "sighting_of_ref": "indicator--6c1c5a97-cc42-4bb9-be71-f7674b4a320d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764ebffe-108e-48ec-8e4d-71bd915235b6", "sighting_of_ref": "indicator--c7749878-f727-425d-a4d7-385bea1624bf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1df3ab-0f72-46b0-acbc-675a00776d53", "sighting_of_ref": "indicator--057d370b-cb85-4b8f-afe7-d6fbb9493367", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1047f1-4e0d-4bb5-9961-b3f52963a40d", "sighting_of_ref": "indicator--aeacf9f3-79ed-4d87-b3ba-7720cd4a4eb6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584aa758-6b20-40d9-b989-e01f25d8c3b5", "sighting_of_ref": "indicator--aeacf9f3-79ed-4d87-b3ba-7720cd4a4eb6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d79afc-1c72-42aa-95ea-6619e9c6f7d0", "sighting_of_ref": "indicator--3975acec-a0d5-4a31-ba99-293796c81bde", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75af6791-fbaa-4e2d-9543-0c5611c8ce59", "sighting_of_ref": "indicator--7dcc5c61-84b7-440d-9333-c54f72dd4c5f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f92404-fc6f-4528-9880-ab596ffc3aab", "sighting_of_ref": "indicator--2c64438a-a1af-445c-abbd-0b57de71ac09", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4120d4be-a104-49e4-9b65-9d3228818aac", "sighting_of_ref": "indicator--c91f75a9-b792-4ea3-a4b2-87332e8797be", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ae8840-abf6-4e6c-9020-0d759ef40104", "sighting_of_ref": "indicator--93e31963-824e-43ce-8625-5d592472dcf2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baff2939-f378-46cd-b4fb-812fd86d9c76", "sighting_of_ref": "indicator--a85aaedf-6a56-40b0-950d-c235c42f80d8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96168631-ce9c-4c63-bc26-76246e564470", "sighting_of_ref": "indicator--1407459c-d34c-4be2-866c-3d71f6888323", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9cd835-afce-4a85-9d2a-277d5f4be1f2", "sighting_of_ref": "indicator--abd286c2-76da-48f8-b2fe-bc752e7b146d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d47c6e1b-fa32-4cd0-90d3-94d5c45b6cb3", "sighting_of_ref": "indicator--b9bf4f50-b3dd-460a-8830-926e7d4b50e5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23c6612-2ac9-495f-8ca3-9bf0605ff3b5", "sighting_of_ref": "indicator--2c5c68eb-d526-4c4f-90e6-cc2e455600f8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2981d8f-ad71-45dd-875f-fe84a56a373e", "sighting_of_ref": "indicator--83355211-b798-4830-ad9a-ff40767efe1c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4125961f-6317-4d28-ac8e-4342f7078fa2", "sighting_of_ref": "indicator--4bf34b05-acec-4b5b-90cd-46542a7df290", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27242a89-5ede-41d1-aed2-d606382d26f4", "sighting_of_ref": "indicator--c6a97c48-e509-4c84-80cf-daa3c4e8c8f6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--763cb2d7-4709-4db6-9176-88c58faef9ac", "sighting_of_ref": "indicator--7a6b9240-d0bc-4227-a92c-fdd99d241f2d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e3a86f-310a-40fe-b51b-1012b5e6c875", "sighting_of_ref": "indicator--d8dfe43e-1ae7-4dab-9ae1-534622ffb28f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d62938-05d0-4192-a8ea-0da29abe64da", "sighting_of_ref": "indicator--2c8ddefa-d277-4f49-9917-0cde376f2382", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c85e2e-ee38-4025-bfb5-5d6a50f950ad", "sighting_of_ref": "indicator--713bf00e-fb2c-4142-b89c-f3106962dd5d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf529c0-03a5-4edd-a45a-9a6f05298ef3", "sighting_of_ref": "indicator--aae97d30-c9f3-4536-8a09-55d80267633f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b697b56-71de-4c10-9be8-f36dc80b5d3b", "sighting_of_ref": "indicator--2975475c-4a16-490a-911d-2bf883a84b01", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84849e86-fd7b-49ce-ac47-f72156ab7157", "sighting_of_ref": "indicator--cdbe4f28-9a03-49ba-87e2-82c2b6b5f909", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c0a828-824b-4801-9b0e-8ba58d72517b", "sighting_of_ref": "indicator--f630999c-98c6-45a4-953f-042ed9a28696", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28428afc-de09-43d0-bd46-e664c4a1fe47", "sighting_of_ref": "indicator--f6adcb3f-d419-4d53-adf3-14fae3cb40ee", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f27b31-0637-4e67-9020-7b40cc540aab", "sighting_of_ref": "indicator--9b854273-055a-400d-a89e-34a99d67f005", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--496c3d08-f555-48a9-b9af-31a4ac39d9d6", "sighting_of_ref": "indicator--3bf92e7d-400f-430d-918b-ae90a5b94940", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c497ba0-f2da-40d4-abab-e405ae0ec013", "sighting_of_ref": "indicator--aef25573-fbb0-4f6d-834d-37f53a7fd900", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da9764c-8f72-4a8f-a600-9ad3237f1b02", "sighting_of_ref": "indicator--8a4c3645-efba-457e-8044-b8f9580127e1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e73059c-cbd6-403b-8d8c-5dfb51f300e1", "sighting_of_ref": "indicator--45b36b42-114c-422a-82f2-09193ecc6850", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07611d58-f7b5-460f-bc3b-5927e7047cb4", "sighting_of_ref": "indicator--dc4a9320-671e-4ed7-bc44-d344b586748b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f091f384-de49-4ecf-961e-13cc43888a14", "sighting_of_ref": "indicator--2ebb3557-e442-45f5-9d68-aedcb8c955fe", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d7cc36-4d4f-4d94-972f-c6268cc648be", "sighting_of_ref": "indicator--9bb48690-57ce-4144-b8ec-713a28b4bebb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--628b741d-d1d7-48d5-8230-336e75c997b5", "sighting_of_ref": "indicator--bee42a13-568e-4857-b9e4-518bef9e411e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e64b9a-ca56-454a-8178-82ff4dcb1ce7", "sighting_of_ref": "indicator--49f87287-f9ef-44fc-b63e-0317ab9fe67d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d914f4ca-82a4-422f-819a-cf8dbba59940", "sighting_of_ref": "indicator--fcf0e728-420f-4621-a34e-beda37227878", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8820e6ab-03fc-40fe-aa90-7188752ba49f", "sighting_of_ref": "indicator--d2887004-1a03-4802-98a9-ff657856525f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004a1a77-0ad8-4a01-845d-f89259bc1787", "sighting_of_ref": "indicator--a95183e5-24dd-4a1f-9211-dfc27c83af40", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f751cb08-7b3a-4f08-b0fd-70c41c2aa762", "sighting_of_ref": "indicator--142055bd-7383-44c9-a7b6-77145de57fbc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb314c5-8cc7-41e5-ad5e-9b7ec5bfacdb", "sighting_of_ref": "indicator--c61c6a4c-8d54-4890-afbf-2529b083682b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d40bbc-1883-47b3-82b9-514d2d6c8b92", "sighting_of_ref": "indicator--97e326b8-4808-484f-98b2-6f3e4f317e59", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bcca316-ba2a-47e4-b96b-8bae28e2371d", "sighting_of_ref": "indicator--5f741e3c-01b6-44e4-9f92-3c33167d2287", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f43105d-86dc-4d4f-ab97-0657ba50ca0a", "sighting_of_ref": "indicator--cbd49454-bb88-4e9b-b74c-957d3c9c6abd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e23c96-028d-4a76-97f0-34fd01ac5fed", "sighting_of_ref": "indicator--0777afec-642e-4278-85ac-c4d32a5b5e1b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d055e82-1ae2-462a-babd-327afa7a2d52", "sighting_of_ref": "indicator--0464c139-3266-4cee-b58a-cd0e802e6cab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--314c78aa-3f0c-4862-82e5-dcedd97602fb", "sighting_of_ref": "indicator--a36e5f4d-8551-4612-a806-f51539e1e629", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef905e1a-38b2-43ce-8bd6-e7e51759a3d6", "sighting_of_ref": "indicator--d55f817e-5429-451f-be7b-675189a5fb20", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--860d89a1-4352-41fd-8f68-e3c1ea0e1de7", "sighting_of_ref": "indicator--42db6e53-9f5f-4b4d-8d4c-07015c6338ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420d8304-ad63-4437-8ff2-8beae59fae41", "sighting_of_ref": "indicator--cf9f026a-585e-4dc1-9dc6-7ba3df1f25ac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4023651b-090d-4ab5-9b77-f3bdc97a72af", "sighting_of_ref": "indicator--0364f2f5-0ca8-4e69-a735-f5285567bf08", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7810d7a5-9855-4e9e-8d32-4a5045f9d502", "sighting_of_ref": "indicator--7c2f083e-959c-4146-a460-569d515b57d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd20238-13c1-4534-9985-c8f123079f70", "sighting_of_ref": "indicator--b19f3354-6966-4030-a47b-b90b2e0d7f6b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--933ce2ac-b6e9-459d-8b7a-a244d6d7edc0", "sighting_of_ref": "indicator--9d7d49ff-0519-4a8d-a165-053494a0cafd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2387f861-e807-48d6-8115-b8bee10aac7e", "sighting_of_ref": "indicator--8738e590-f613-40fb-aa8d-13915eb9fc21", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1077a0dd-ea04-43e4-8241-7c3aa7a30944", "sighting_of_ref": "indicator--41966c61-4030-4adc-9518-daaf4a5bcfcf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5a8264-065e-4f26-a201-01815c63cf59", "sighting_of_ref": "indicator--806808db-522f-4a35-8ae7-dc867d4491ac", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f3bfc9-3346-4450-bc66-c1c4f8da6d20", "sighting_of_ref": "indicator--7175405c-869b-40f3-98ea-df8447af55c8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba6193e-5e71-478c-8e0f-6a8ae048a881", "sighting_of_ref": "indicator--e4bfc10d-0826-4fd9-8bc8-8aa7b46de903", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe402b1-42d0-44f3-a666-312fb7925a90", "sighting_of_ref": "indicator--ac34260e-d930-43f5-8362-79055ffe8d35", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d4e62bd-1c81-4555-a520-fc8dc8d99f7e", "sighting_of_ref": "indicator--cc9bc610-6dc8-4b2a-918f-3138f7590113", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b32cb12-5821-44d5-921c-a05f6f5e97f6", "sighting_of_ref": "indicator--138c35bc-1f61-4755-bf92-050fc902e3bf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b91405-99d9-4b85-8db1-bd7015bba190", "sighting_of_ref": "indicator--56654b63-41d8-4650-8097-c3366759f760", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d6527c0-9f51-40d7-ac0a-052b4bb9e5b4", "sighting_of_ref": "indicator--ac9a92d5-7523-4d94-9d42-69c2392b7b88", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194a13b3-eda6-4018-aa8f-0fdb51db7671", "sighting_of_ref": "indicator--ac9a92d5-7523-4d94-9d42-69c2392b7b88", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0707e219-663f-4d9b-8206-6dea642918e5", "sighting_of_ref": "indicator--9207e135-8264-4747-bfa2-2ced1b60313e", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a12090-e77e-4edc-8ec6-34f45e264cd5", "sighting_of_ref": "indicator--9207e135-8264-4747-bfa2-2ced1b60313e", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd1c61e-0b79-4f34-963e-93500d52e828", "sighting_of_ref": "indicator--18461c75-2d5a-4fb5-8444-5adc45021c05", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae5b43f4-4ac7-4848-a0f8-067141df1274", "sighting_of_ref": "indicator--c4a121bb-6309-45c3-96d1-db37ef718aa9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff7936e-da03-406e-ba42-0417d73f2fbe", "sighting_of_ref": "indicator--ec97b5bd-842d-4c3f-9549-75306aa1c4ed", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f07da8-c676-45d1-bc46-c27339c2ff38", "sighting_of_ref": "indicator--c7da2ce9-8a05-4868-8b02-68adfd821a89", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0fe9060-c2e6-4141-9154-6c504b7b74fb", "sighting_of_ref": "indicator--50555c69-064c-4ac4-80e0-7f30dd2efa79", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e87b69a0-219f-47a0-a6d8-0170d50d1c31", "sighting_of_ref": "indicator--50555c69-064c-4ac4-80e0-7f30dd2efa79", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39744145-dcae-4c4e-b3cb-625e23e4f998", "sighting_of_ref": "indicator--d3c43fa2-994d-4d45-a804-85e8507d1e25", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276ee211-878a-4f4e-aa7a-0116231a2caf", "sighting_of_ref": "indicator--d3c43fa2-994d-4d45-a804-85e8507d1e25", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61bbc384-6a62-44c8-86b3-bb0e158f7da2", "sighting_of_ref": "indicator--0bba9c2b-6403-49ad-b3ee-d220147c5aa2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9adee981-7540-4bf6-bd62-65d564ed7cfd", "sighting_of_ref": "indicator--4668de8f-55a0-43ba-a01d-2217212a3ae4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94bcc304-8611-4cd3-955a-86e37425c3a0", "sighting_of_ref": "indicator--b9e7f91b-c3ec-42cf-a628-e58b9b64fa1f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f659a09-f3c9-4ba6-9953-28a4d10874d5", "sighting_of_ref": "indicator--98dae5f2-ac2e-489a-9dd8-3016766285da", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46626f1f-012b-4fa2-9df7-dca8d7b23311", "sighting_of_ref": "indicator--9ee17f42-b612-46cb-84e0-0058cd62bec9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83052bc6-6e4e-48c4-9e02-bcb3e68d4c30", "sighting_of_ref": "indicator--25018c3c-455a-4647-aab9-167513069992", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fedd729c-70a1-473a-80ef-b9ce32353668", "sighting_of_ref": "indicator--6c45b135-3b86-4940-8795-bcd71e9fa536", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d8d475-2b07-4b38-b610-49cda56c2bd5", "sighting_of_ref": "indicator--6c45b135-3b86-4940-8795-bcd71e9fa536", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34879c23-ca55-49bf-a075-8729aac8f846", "sighting_of_ref": "indicator--3ebab7c6-8d60-4d28-abf9-27ed48d2c06e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b048e78-1eb9-442b-9b08-7f593067a1f2", "sighting_of_ref": "indicator--2f77183e-6614-45c6-9da7-3a770cacd7b3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--367e953c-bf14-473f-8963-123fb3a2b4f3", "sighting_of_ref": "indicator--ae341ebc-676a-4696-a97d-031d5d2ddf1b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b8c031-78ca-4b06-be64-b847b51b18c5", "sighting_of_ref": "indicator--ef599095-215e-4e63-a19c-486020c6f615", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a8cbe90-9e3c-4b37-97c8-b8d5117c3cb6", "sighting_of_ref": "indicator--270ae16e-cc62-47bb-8cda-cd66fdde1c6d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf62bc0-c925-48ca-be34-7c5d34ec15a0", "sighting_of_ref": "indicator--ddb86680-4e2b-4909-a0c9-78f0afffac6b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf208a0-4d12-43ea-89c4-36d3f956c462", "sighting_of_ref": "indicator--a2845573-f18c-47c1-93c5-17f92ea8e184", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d945234a-4a9d-45ce-9636-c497ff144caa", "sighting_of_ref": "indicator--291e0bc3-b57d-4750-8e67-0c712ff90aee", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b7aa4a-9ca3-480b-8532-7a2955d5ca5b", "sighting_of_ref": "indicator--ed283c86-8ac6-4646-8c04-cd8e22ceeca3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41abc5f9-9a17-4e58-982c-15556f14cd30", "sighting_of_ref": "indicator--571af96d-a5ca-43dd-bd64-26ca0b44677a", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06182581-54a3-430d-9bf4-435b02a70885", "sighting_of_ref": "indicator--894e221c-277e-4658-a0f9-e551379d5f6d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5801c0f-5e43-4092-8d4f-697992236c2f", "sighting_of_ref": "indicator--275eeaf6-2666-42b9-bc72-bb2f326d2d7f", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31e8c03-65ae-4e5d-8c19-7712f7859d3f", "sighting_of_ref": "indicator--275eeaf6-2666-42b9-bc72-bb2f326d2d7f", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19bb2644-0452-4a51-b4b4-555fa0e51a12", "sighting_of_ref": "indicator--122e820f-36bf-41e8-9efe-4d22513f4592", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76965a8-7998-4f03-8a6e-244344841be3", "sighting_of_ref": "indicator--f7b08f46-453f-464c-9954-0165f04a1429", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de57a82c-754f-4466-87bb-53ff82ee454d", "sighting_of_ref": "indicator--628b5d46-d443-463b-8b33-6a476927eac7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8c0b4a-64a2-4d83-b6be-94ec1fddd1fd", "sighting_of_ref": "indicator--628b5d46-d443-463b-8b33-6a476927eac7", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--083e5b27-8cd0-4b9a-ab69-f58301bf1f45", "sighting_of_ref": "indicator--44ac1710-87c3-4751-85ee-55e394c588ee", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d8371c-5053-431a-9668-3cc87ec26157", "sighting_of_ref": "indicator--fad005ee-20b7-4a31-bb30-c67382311c9a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c845c2c-51bc-4e44-9e15-2d52a139f87f", "sighting_of_ref": "indicator--6a219aae-335a-4d48-a6dd-54f6095e7f3c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c0429ce-5869-4c7b-af60-dd6c6ef3d8b3", "sighting_of_ref": "indicator--5434ff11-d17f-4a5e-b270-bb8b4b10571b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8493d3a-64fb-4b92-ba1b-e232e717a1cd", "sighting_of_ref": "indicator--74cf25f5-443e-40f9-aa0c-cbb469eba1f3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee95ed7b-785d-44c2-91df-304bc0e62989", "sighting_of_ref": "indicator--b1906bc7-6b18-4c88-9bd6-3455dd3dee9b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036ca29d-43e5-4647-8bbb-9008bebdfce1", "sighting_of_ref": "indicator--68954375-c5d0-4062-b942-dbd2271b4c3d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c44f5d4-fa88-444c-bec9-76e8058b11c1", "sighting_of_ref": "indicator--007dfe2f-93a2-4770-b93e-e0e98f3b229e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eee3cb9-e9b9-445f-9166-83507cf1d089", "sighting_of_ref": "indicator--d331ea24-e9dd-4239-9568-1f855d88201c", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d555168-880f-4e65-953c-d6538944ba1a", "sighting_of_ref": "indicator--9c6af541-3c56-45e3-81ad-4221a6d1891a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e1b7bd-c909-4206-9dd2-b3ea814c8c72", "sighting_of_ref": "indicator--e7f9ef17-55f2-43bd-ba78-fc94540c7fb4", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085fd109-10e1-402d-9924-55a04a352cad", "sighting_of_ref": "indicator--e7f9ef17-55f2-43bd-ba78-fc94540c7fb4", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc1d23c9-58df-467c-b277-5a481a3ee1e7", "sighting_of_ref": "indicator--e7f9ef17-55f2-43bd-ba78-fc94540c7fb4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa2ad9b-1624-4c56-9099-40e71f0ed8ce", "sighting_of_ref": "indicator--e7f9ef17-55f2-43bd-ba78-fc94540c7fb4", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b86b241e-634f-4d9e-bb03-ba451ed2b007", "sighting_of_ref": "indicator--3a52a4d8-0b2f-44df-b7e6-1cf5ca342310", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--544929fa-badb-4106-8455-5f9134d584d8", "sighting_of_ref": "indicator--9b06ec0a-62d6-4b48-bb3e-f2af11f2adff", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac0c62e8-40db-4487-8b22-a0c62757d939", "sighting_of_ref": "indicator--1dbd6075-4e05-455b-b8e6-38d1af090f67", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d1b4a3-a2cd-4bac-8ab3-9d0ec8386698", "sighting_of_ref": "indicator--1dbd6075-4e05-455b-b8e6-38d1af090f67", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88f8a9a-a60e-4bf7-82d2-05dee4a8f08c", "sighting_of_ref": "indicator--3a638483-699d-4aea-beab-d1be9fbd47d8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6df87d8-c62c-4c3f-aa26-84db54ac08ba", "sighting_of_ref": "indicator--c1eb7df5-1ec2-47cd-80db-3076a7cd6575", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f574d42a-ba74-4e10-84ff-bc6f26caf37e", "sighting_of_ref": "indicator--054c7804-ea14-4bcc-bb25-8cd488ffece3", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf17477f-ad6b-46d9-9f52-a7d717cbdb1a", "sighting_of_ref": "indicator--657f5ba0-d826-451c-ab21-23c5182f16ec", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d81b44c4-065e-4b7c-af82-96e927e3a814", "sighting_of_ref": "indicator--9fbdceb9-95e8-4667-91ef-c70780efa0b0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9ae959-52fb-4d5c-9b12-afb6a60b9846", "sighting_of_ref": "indicator--4df543cf-b77d-4141-a722-47794cb67c7d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--515742b4-700a-4498-adab-ae614e966e07", "sighting_of_ref": "indicator--bf40b1b1-b40d-473e-b3ab-404aa0855ee4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98082fbc-508e-41b6-b180-959a8082749f", "sighting_of_ref": "indicator--a2cb0f18-2cbb-44eb-a31a-a1eb596d14e9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67615165-062d-4853-b494-7d051ed8ff82", "sighting_of_ref": "indicator--62eec88e-d843-4750-adb7-990eab7df2a0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a455394f-49cb-4d56-99c8-ec5f7d7a853c", "sighting_of_ref": "indicator--480b944a-0a12-41dd-9c5a-b89304cf2d1e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ff3ebd-9c40-41d6-b8c6-d19d519cfc54", "sighting_of_ref": "indicator--18afae7e-525a-47be-a50e-11610b3c80a6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a45365c-9560-422b-837e-b253f199f67d", "sighting_of_ref": "indicator--e158aba5-5d5b-4c77-a2dd-dd81bae15137", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78408cda-c3b1-4de7-a370-7a542eeac567", "sighting_of_ref": "indicator--9d721878-3a17-43b6-b25c-2ab13c3e7ff7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--051fbf97-1054-46de-8255-5b9acaad0ab5", "sighting_of_ref": "indicator--1d523bde-2c6f-472c-9310-beaae457b212", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1393e8f4-2cf8-4fc0-b030-085a58955a30", "sighting_of_ref": "indicator--c9f8a817-0c83-4e87-9836-e45f8385b6b9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf89382-e8e1-4be4-9bb3-785e9d517804", "sighting_of_ref": "indicator--f500b15c-5e74-417a-8435-002c1877ab34", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0633aca0-b042-41d7-84cc-839dbb27630b", "sighting_of_ref": "indicator--3360689b-c853-4a70-b8f2-ad7601ff6415", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e64076-7da4-44bd-b466-468aea448814", "sighting_of_ref": "indicator--dc2db655-e9a9-4fbc-aa5c-7c30d5cb2ba4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba515ed-d515-4cce-a6f1-f2e5657be722", "sighting_of_ref": "indicator--171650fd-61d4-460a-82de-de690ead9e9c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77252bd3-4a62-46df-aff2-62c4d834fe0c", "sighting_of_ref": "indicator--d0351dca-32b5-4a35-9a38-514a4d5be8ec", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9099f2-2ab6-4619-aa51-48290d9d6524", "sighting_of_ref": "indicator--c257eb22-a715-4076-8f70-964432a5f4e9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91516bfc-04cb-42c5-902e-b7cdf91cf923", "sighting_of_ref": "indicator--f58847a7-b829-4a5a-af92-a9a9747b2135", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1139e9b-7f2b-42bd-b369-8d6cb0eeef4d", "sighting_of_ref": "indicator--ded4c874-9cd7-4b41-9642-bb7b753e3e9c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c9616c-020d-4592-951c-7956750b78d1", "sighting_of_ref": "indicator--ac66d0a0-e1f1-4c2f-a6ab-c9a31d417eca", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e266ee3-0a34-42a6-9873-c019df0a34bc", "sighting_of_ref": "indicator--9a970849-e616-4aba-b083-b8b3e860559a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c65b32-d4cd-409c-8148-9bde639a04ee", "sighting_of_ref": "indicator--e6fa4291-9857-4392-8296-b0d2380913c8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9d47ae6-aa0d-419d-a7b2-38fa9a2d722d", "sighting_of_ref": "indicator--60db1afd-b443-48b6-8150-947be4ea0299", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1fd2cd-bd9f-4bf4-a603-724509fa60d8", "sighting_of_ref": "indicator--650e5025-5e6d-412a-a5f2-a770da6da312", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--362f9deb-ffe7-4610-b05a-109fb173411a", "sighting_of_ref": "indicator--3801bd23-38a6-4e76-bd83-c602e3034931", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65031018-e248-4c8f-b18e-31757ead709c", "sighting_of_ref": "indicator--3867fef4-109a-4cb2-8d50-a8d8a45c0ff2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5e3306-03d7-4003-81ae-e0753638fbf3", "sighting_of_ref": "indicator--17359c4f-b2b8-496e-b052-954fd0e9058d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbdbdf43-a0a6-48f5-a717-e6c1fbad69ed", "sighting_of_ref": "indicator--642a7525-705b-443d-9581-e429ad598a41", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3366afa-c2a8-4c2e-a1fa-1e43a79bf6f2", "sighting_of_ref": "indicator--c17659a3-834b-4470-8f46-78fec0d12774", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72533c08-e7f2-435d-a87f-661cc42aeefa", "sighting_of_ref": "indicator--e14521b6-a12f-40a8-bcce-d7eb5489e81c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6ba8af-23d8-4638-bc5d-bb29cece19f9", "sighting_of_ref": "indicator--efbf769f-737e-4154-a4ba-e9a5b41f45b9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c81f819-8c73-4557-88f1-198546d2f968", "sighting_of_ref": "indicator--e4a470b8-a4da-4b30-aacd-b5630938e27d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe8b571-b7fd-460b-8418-c85a7e807f87", "sighting_of_ref": "indicator--b03fae68-41c1-4756-9d37-2802d3e88ee1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81024c7c-91dd-472b-b73b-9152308f33f0", "sighting_of_ref": "indicator--164eba74-9672-499f-83b9-0a2f37319903", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a49a5a-81c4-4bdb-a454-7f6881fac94a", "sighting_of_ref": "indicator--85415489-205e-427b-839d-04cab805ad9d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5c7560-5abd-4378-8749-6306a7d05cb0", "sighting_of_ref": "indicator--041a5597-3236-4099-9fb6-99634006498c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e84874-5010-4388-ac62-8184c4005fb4", "sighting_of_ref": "indicator--9f1655d5-67be-44cd-b43b-bd1ac50e8af8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6998f86f-7a85-4c33-b9ff-c1c89608462a", "sighting_of_ref": "indicator--d98223c8-27f0-49e8-8601-bcfe5808aea1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f912494-2883-4ce8-a44c-290495fb5f51", "sighting_of_ref": "indicator--593a362e-f48d-426d-a39d-0b39758de54d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795e58be-60de-4f38-9c58-c400954912a2", "sighting_of_ref": "indicator--44a986e0-20ba-44ae-92b0-76593ee00335", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d94050-3c57-4fcb-a05a-2ec2546d7df7", "sighting_of_ref": "indicator--80fa07a2-8a35-4448-8a29-db5bfcebe876", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee36773b-5974-45b2-b368-07d9db2d3ab5", "sighting_of_ref": "indicator--ecb46693-21e6-45b3-91f1-22ab34bac9de", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3c6b018-c433-4b88-87da-3157ba5cf01d", "sighting_of_ref": "indicator--055c1f3c-29a7-45de-8794-fa288c9f035b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1275a115-7261-4b6f-8b34-25cc9f4fbcd4", "sighting_of_ref": "indicator--27c9e1e3-2de3-4f99-ab82-2291f8cd5f64", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2e256e-1500-4786-9cea-33dba731cc00", "sighting_of_ref": "indicator--3926b83b-2f38-494b-9b3d-fa199c43dfb5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e73b9f-b1d4-4eb3-94be-d5a0952f30aa", "sighting_of_ref": "indicator--839273ac-1e5c-4831-b7a7-44092cd1f595", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66de8804-33f7-43f9-9a10-d44fed049cbf", "sighting_of_ref": "indicator--cc66b73f-780d-4ef8-926f-46945350ada5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--106bfd09-1b28-44a3-b767-59b16b8a00a3", "sighting_of_ref": "indicator--6fafca7c-dfe4-424e-b7a6-d7b33db8b51b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0e94a2-e987-4de1-86c7-55132b43670e", "sighting_of_ref": "indicator--2bbb8a2e-5177-4cf8-a1e3-f9fbd20f054b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64141f16-01c9-4317-b3d9-e52e5b1d0bf9", "sighting_of_ref": "indicator--8f387e28-2376-4f24-9b7a-9c162dda717a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf3eca43-666e-443a-a63d-de836cc168fe", "sighting_of_ref": "indicator--317e9b2a-ac30-480f-8e7d-ea4d8e409714", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59a79b5-1677-4421-8027-bccb96f8b8d9", "sighting_of_ref": "indicator--9ad29516-e6a5-4c55-8d45-d5ce700c87ca", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d961e85-4a6b-4bdf-b9e5-b5b548d02510", "sighting_of_ref": "indicator--7a52a50f-edbe-470c-bc8b-f980be21f0cb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd037ec-fbb9-4391-85e7-65ac4d13d083", "sighting_of_ref": "indicator--18a15425-c171-43ee-b4d1-e7a6b4fc129b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ec16b1-dc30-49d0-a3e5-f1dfb1c4ba57", "sighting_of_ref": "indicator--509f9de3-312b-4f09-8dd0-0888c2f226eb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce985d8b-95f5-47c1-8c43-c997718f5328", "sighting_of_ref": "indicator--8bcd08ff-63cd-4399-b96c-8a48e19faede", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c110c41c-db1c-401d-99e8-888af7617c90", "sighting_of_ref": "indicator--704c3357-d953-43a6-b1ff-9693cbb607f5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db896c8-9146-47be-b606-ecab0e12911a", "sighting_of_ref": "indicator--75bee50a-02c9-483b-b44a-7c67519823ef", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a87337fb-0942-4290-b89f-dae18ecc135f", "sighting_of_ref": "indicator--7f2e0ea3-5c99-40ca-8e6c-c2971df9b055", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f51e3d5d-d8cf-4129-9a97-8bd0ae8e4fbf", "sighting_of_ref": "indicator--0e637b5e-bb16-40f3-8031-3d8aed84b272", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--770ea2fb-a914-4f90-bf70-2bcdfda8ac03", "sighting_of_ref": "indicator--4f50b013-174b-409f-9224-9fa44bda8070", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2371fcb2-ad5a-4946-9fc4-48126b1cc4d0", "sighting_of_ref": "indicator--e2aac760-c476-467c-8235-ba6c35a11d97", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2051261c-a3d1-4b90-8da1-5683d852c098", "sighting_of_ref": "indicator--c5928ae0-b384-4138-9992-6cd66c583c31", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a17f569-a7f1-43f8-9fd3-9a4ce9af6f09", "sighting_of_ref": "indicator--a26f34aa-d72d-428f-8650-a7f44a8d8ad6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a135bb-1221-416b-97ec-a3f0d5cc9ff2", "sighting_of_ref": "indicator--79f2700c-8509-4384-a624-d43b47b87ae0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bad3ca0-b544-444c-a822-1133937cf73b", "sighting_of_ref": "indicator--2048822f-f37d-4c11-8461-66a05f0b2343", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c195b90-a31a-4d6b-a610-77ae99088d8c", "sighting_of_ref": "indicator--7a01c0f8-69dd-4679-92e0-ec32ed96baf9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07225da-fe5c-4d36-99ed-3d0e6491dd3b", "sighting_of_ref": "indicator--ab5d9702-02ef-448b-a32a-abebbfbfe0ab", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39fa4eb1-be6a-429a-84cf-42ed0312ea4b", "sighting_of_ref": "indicator--55a83cc3-d903-45c8-9e47-f9025b05c22b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc3de6b6-d8a5-4888-b9bd-f9f4d7ac894c", "sighting_of_ref": "indicator--ea96eb61-a6db-443a-b273-1ce090cc7117", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb00743-70eb-4f19-b580-d0e89e3e0f11", "sighting_of_ref": "indicator--bc5138c9-e260-4ee7-9b7a-ac97a8a7e2c0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b00572ba-2354-4843-bc03-6f6aa948d9d6", "sighting_of_ref": "indicator--d29f4563-8bd4-485b-bd1d-e9c56d342ef9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0005778b-4da5-4465-8134-54e68160bad6", "sighting_of_ref": "indicator--c4331f38-c79e-4319-b433-52abf8eca0a8", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b188d180-0da3-46ba-bb4e-6ca94d58ecd0", "sighting_of_ref": "indicator--b50b5ca2-15ab-499c-9f2e-c149d5db2f99", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8bcc76-6bc7-4a26-90a4-7fdfe26e5282", "sighting_of_ref": "indicator--a0f655b4-d492-4c62-bcd8-0a702a891371", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85910c4e-3c26-4da2-8a31-a5697dc609e0", "sighting_of_ref": "indicator--f2309b46-ee1f-4929-99ec-31e3e2b36cb2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e310a8cf-c239-4fd2-b43d-646ce54d971c", "sighting_of_ref": "indicator--788ffe6e-36c7-43ba-baf5-1d7ffb8dd199", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171352e4-89b5-497b-a790-45e2da500463", "sighting_of_ref": "indicator--788ffe6e-36c7-43ba-baf5-1d7ffb8dd199", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbeda2a-d635-41aa-a645-c1299b9c582b", "sighting_of_ref": "indicator--8dd667f0-f592-47ad-959b-371ea7a65b01", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab18c9d-e68c-41d4-bb87-82a6a91812cf", "sighting_of_ref": "indicator--6ee1450a-c49a-4019-909c-977b72badad2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--746e3fb1-49f5-4eff-bc15-68c367e008d4", "sighting_of_ref": "indicator--61263cac-e9ba-47db-b32e-49cdff072d07", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a3b947-4155-42a9-8b04-ce90807d34aa", "sighting_of_ref": "indicator--52b179dd-fefc-4ebd-9251-ded6ab15b578", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5fc6ceb-4153-4d1c-8120-0d13147fce2f", "sighting_of_ref": "indicator--6cec8094-b7e6-4943-bd0b-b6d7b4e2cccc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa8ad30-c090-4269-83a2-98eb98364050", "sighting_of_ref": "indicator--f21dc153-447d-4649-8b78-caf27d39e7f4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2621ec-370b-4f41-a882-a491554d39a0", "sighting_of_ref": "indicator--bd1edd4f-fa46-475c-b1bb-447d1c665f99", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1151555f-b9c7-4f5d-b10f-d998f78cf5ba", "sighting_of_ref": "indicator--00883a6e-eeb6-4d3d-88dd-4ac58314b5d1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b759c15d-99b7-49c1-aa7d-1f3038dc39ba", "sighting_of_ref": "indicator--197b816b-5b51-4c49-9ea1-c6412932b18a", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--805d1872-e821-40bd-b20d-4f59747ce4f5", "sighting_of_ref": "indicator--197b816b-5b51-4c49-9ea1-c6412932b18a", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81698c85-21a7-43fb-a5d1-fce3a712ebe2", "sighting_of_ref": "indicator--7333713e-bf86-4d57-9555-93e62249d29a", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1595d729-b4b1-4ea8-8cec-2944d96c0c9b", "sighting_of_ref": "indicator--179467ab-9caf-48d7-94b7-cae6a6f24940", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ea269fd-7b36-46e0-9952-cd4e41f25cac", "sighting_of_ref": "indicator--ad6bac15-6312-4dc6-a5fd-23a50fc8effb", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d37faa-b800-4ecf-8142-2967b6f25a2a", "sighting_of_ref": "indicator--81a73a91-819a-4dbd-be52-e8b81fce8e14", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d64399-3b09-4ee9-8e79-a521acdb0ada", "sighting_of_ref": "indicator--fdc22b78-d545-48a0-923b-4f07d3162f38", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d0edf2-3ba7-467d-a54e-43e83e22e8d8", "sighting_of_ref": "indicator--cac75207-83a8-4daa-a2d8-6a256b6b8ce6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a9618f9-82f7-472f-906b-8bb7224b7fd2", "sighting_of_ref": "indicator--27ed7ccb-7862-4b22-86de-f551b77ed8de", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb172ee-d5be-4672-84aa-d1d3bc833daa", "sighting_of_ref": "indicator--2ffed5a5-614a-4998-b9d6-932d0dd8c43b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000fbdb2-543a-40fb-a16e-a7bf5d30600b", "sighting_of_ref": "indicator--4ef20e32-4773-47c4-b5cf-ced35ae856cb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb22505f-91ad-45c8-8eb3-0163cd613270", "sighting_of_ref": "indicator--833be80e-4141-493f-8190-2c16af20480b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--710003a8-b740-4198-831c-4b3770845d2f", "sighting_of_ref": "indicator--ecadff8c-caf2-4528-ac05-a217237be906", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b93f296-2a64-4f07-b995-a7610bd7fc2b", "sighting_of_ref": "indicator--fc744208-1f8a-48e4-a1c0-ad24d434e9d5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--980dc8e6-651a-40e8-97ff-6562c2d4ea4b", "sighting_of_ref": "indicator--497519b1-d3fe-4aed-af87-984e45fcbffb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8b8cd49-6886-4ff0-8730-3b411b47bb8c", "sighting_of_ref": "indicator--b780825a-d70f-4806-8ea7-b0000340e765", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ddd9505-054f-4b22-9d20-2068cd8c0e4a", "sighting_of_ref": "indicator--9ec9de8f-c1b3-41f2-bf7d-932ab6a24719", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d358bc80-e65f-4048-b6f7-af4643ea3f19", "sighting_of_ref": "indicator--061f7629-cfad-483f-9396-363244677bc2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86567bfd-b7e3-4421-97ac-78d105721a16", "sighting_of_ref": "indicator--295858fd-faba-4c7f-93b0-ccfd256fce89", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29655b8-3443-4c5e-851e-ccbde7ce404b", "sighting_of_ref": "indicator--92310283-e26d-4427-ad2a-026e55d1387c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bea41107-63ae-4574-a8c2-9392a61395bf", "sighting_of_ref": "indicator--a52b3322-b7b0-495e-9021-4290671398d4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2160b20b-bcff-40a3-b9f2-4f4c41b0c6a3", "sighting_of_ref": "indicator--5803f1ec-fc6c-458d-997c-0f6114964518", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5487446-8f55-45f5-b25e-3ea948eccf05", "sighting_of_ref": "indicator--2519cd0b-e5a2-4fe4-85b3-864dbf7f3603", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cc8c51a-299c-4dd4-bf76-f9880d7eaa79", "sighting_of_ref": "indicator--bb604d10-d19e-439c-af5f-ecfa02be3f5c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c9b55e-38b1-4c10-8a38-781de262e153", "sighting_of_ref": "indicator--8623469b-a675-481c-9075-4445e875bfeb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5261297-ccfe-4441-b92e-d889a824e1a1", "sighting_of_ref": "indicator--377aa83e-f602-4227-9ea8-30c5338c33a5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7657717-8731-47c8-b09d-441f1ecda75c", "sighting_of_ref": "indicator--040427fa-0dbf-4546-aae5-a5d41fb3f762", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f644c7-bfd8-4ca6-abde-ecdb78f460dd", "sighting_of_ref": "indicator--ef3c039d-90b6-4799-acb2-e228cc37c3d2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7895489-bf95-41fb-ab31-6039cfaa786f", "sighting_of_ref": "indicator--9b64e2d1-4b3a-4d51-8460-dcbbf614679d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ac950a-1984-4b50-ae4e-400eddcb03cc", "sighting_of_ref": "indicator--8033b379-12e0-4d52-9ebf-324eab956136", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b53b82b-ce00-486e-9327-b01365973e45", "sighting_of_ref": "indicator--8033b379-12e0-4d52-9ebf-324eab956136", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a0da59-2dd3-4509-9962-ed1554f61743", "sighting_of_ref": "indicator--83747acd-c1ab-4387-9408-9f0adea700ad", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb990995-0324-430d-97ec-8aa2f80c44c3", "sighting_of_ref": "indicator--8bb25634-a989-4387-af8e-60575dd0f0fe", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c14d008a-82db-476c-8b4a-85de30f4b0d1", "sighting_of_ref": "indicator--4b8dd2db-b526-4142-876a-2c596f4bb3e0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b7ddad-19c7-4487-acc1-4838d0795699", "sighting_of_ref": "indicator--f886622c-0ac0-46a3-a685-0ea7de054607", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638304d6-0e87-4809-807b-ded6321c5cec", "sighting_of_ref": "indicator--bb50a960-0d4f-4224-94ec-34ba69631dba", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da9b085-93a6-47bb-b314-37586067b44c", "sighting_of_ref": "indicator--bb9d78f7-5947-4d76-bc82-d7d7ce1558bf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98056663-5733-4701-8eed-1d43613ab871", "sighting_of_ref": "indicator--f851fe14-131e-4a2f-aaa3-6f9aba1e1427", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a90f49-2d41-4201-8e12-dc4b34f5569b", "sighting_of_ref": "indicator--938dbad1-6012-4a47-ac7a-b938f079ab27", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec5c61d-9074-473e-a779-8cfc603bb7c4", "sighting_of_ref": "indicator--a4db0e67-c1b0-49ab-b024-b7f4c3634470", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563a8aaa-17dc-44b9-8dd3-022e04f715cc", "sighting_of_ref": "indicator--c86ef5b1-42e1-45f3-be3f-227a6d297788", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247f0c8e-de94-427e-8a60-2172d99a32b1", "sighting_of_ref": "indicator--b4079945-f20e-4b3c-a7d4-04da9537ed0d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594439f9-1791-45d9-af2a-bb0f5662de5b", "sighting_of_ref": "indicator--e68fb9a6-5fdb-4109-8f64-ac0c8b5f91b4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e2f5103-c17c-4a1a-9303-1bb00104d285", "sighting_of_ref": "indicator--d12d9a2d-4f37-43d4-8826-64edb3ccf578", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1edb648e-165d-4d3a-a666-cbdef50ae464", "sighting_of_ref": "indicator--4b32cb64-1dd9-4f1a-b66e-796023e83d9a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e221857-48ce-4a79-904d-b219d74be4cc", "sighting_of_ref": "indicator--a1c5c47b-9abc-4e1a-9954-693646373ee9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0088063-12cf-4fba-b31f-93ed3370eccf", "sighting_of_ref": "indicator--caad2a78-1662-4970-9fe0-1b9c0a34f7ea", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c384af4-1c75-4bd3-9159-ad13d234ed3a", "sighting_of_ref": "indicator--45e97bc2-ac55-44b1-834e-bc100a769604", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1d25b1-b73c-4d0e-88d7-f5e765409de8", "sighting_of_ref": "indicator--ee4764d7-2f59-4d38-9e8e-405f28fc1bb0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b26450-cd1b-40a9-811d-c500844b5fb4", "sighting_of_ref": "indicator--f8a59c4e-25b6-429b-a256-3106156f37fa", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61166cd6-5fac-4ac2-affc-b7438e583314", "sighting_of_ref": "indicator--f8a59c4e-25b6-429b-a256-3106156f37fa", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd5f99f-9242-42d2-9112-b33124379544", "sighting_of_ref": "indicator--3892f56c-b1a0-4bd8-b18b-a291233a3121", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ce5f8e-bd80-42fa-9f18-b5037efcd182", "sighting_of_ref": "indicator--5751c6af-4f4d-416f-a902-466dfb5438a9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f41fd9b3-a4de-4fbe-b717-1933fe099a50", "sighting_of_ref": "indicator--11577159-1d5c-4236-af86-85d38b5a066e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ca89b7-3577-4aa2-be4f-2959c7f4bed3", "sighting_of_ref": "indicator--282bed44-c496-472f-af93-8cf98d4378d4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f61d77-2b3f-43d6-9f30-c1bf0aa12691", "sighting_of_ref": "indicator--ed3e1d68-87b7-434b-a86a-dd3376411e2e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ac68ce-67d8-42cf-98a9-f87a388adbf3", "sighting_of_ref": "indicator--80a69897-c7f1-4fe9-9bae-f0ac8145b148", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2fd7fe9-cac1-4c65-8c3b-b6cf54b96a31", "sighting_of_ref": "indicator--2642c271-a67f-432b-9804-9500083ec4a9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06db198f-0731-4585-a762-4e79db6285c7", "sighting_of_ref": "indicator--2b6485b8-2f4e-4352-ac2c-47cfd225b998", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c33c36-ffeb-4ec8-87be-b34062030aab", "sighting_of_ref": "indicator--b3f3ff41-ff58-4a84-9b7a-c214141a4f84", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b782d173-fb64-477f-8bec-42ef8fea4868", "sighting_of_ref": "indicator--1f0152cc-ae6d-48a6-bc13-2bdc48ecf5ac", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e94d6b1-1af3-4d18-a9f2-3a63f2dde3ba", "sighting_of_ref": "indicator--fb437bad-02ec-412a-9afb-1fb2b2616b76", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--515ceb18-7eeb-4600-bcf8-74cd0fb9d7fa", "sighting_of_ref": "indicator--cd746312-8758-43e2-9d61-a276ea3d866e", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62fe4673-39c8-4c16-87bc-c71d8c9239e5", "sighting_of_ref": "indicator--53ae78c7-f1dd-43b2-9912-d951db86ba4a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e60c6b-ce60-4c2d-a482-d63baaac19f0", "sighting_of_ref": "indicator--6415704e-f06d-43af-ba72-357be84f5421", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a88b54c2-edbb-4362-9522-03c13c9de417", "sighting_of_ref": "indicator--9260def3-ee3b-4b6f-8b7c-064d211a74fa", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ae6a04-3621-4426-af24-90a6e3464d13", "sighting_of_ref": "indicator--7591c458-7107-46cd-8e7a-16cda3a1e76a", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52318e60-bb90-471a-9fac-b33b026070c1", "sighting_of_ref": "indicator--1bdf5786-e00f-4e69-8853-463655d52341", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caf75687-c171-4e95-abab-468c5c4a9f23", "sighting_of_ref": "indicator--2c4019ab-7bca-408b-8ecc-5f61edaa8117", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2703a611-46af-4c9f-89c9-e43399b470ff", "sighting_of_ref": "indicator--184ebb00-93f4-44a7-8abc-78eea207b037", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b090ef-7a4a-4e55-8220-7e905a6139cf", "sighting_of_ref": "indicator--3774e8fd-e67a-439a-a902-057ac1a31861", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--754c5eee-4543-4b22-bb32-30189f8bd4e0", "sighting_of_ref": "indicator--24ce8a02-f9d9-409b-9300-3854486552e3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c338e5-e827-449a-abfa-78d9f409885d", "sighting_of_ref": "indicator--03c2bcbb-5216-4e1f-a934-ca35e9eaaac3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2b56b4-80dd-4c16-8dbc-d8da6731d850", "sighting_of_ref": "indicator--ca48b8cb-616e-416d-a726-86996301dd6e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13bcc009-f3c4-4ab9-9260-909a60cca222", "sighting_of_ref": "indicator--72175124-9b5f-434f-8ae2-02aeb988711e", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b8d972-745e-4ea9-bb82-4ecf9a3d0247", "sighting_of_ref": "indicator--ac5f05bc-b862-441f-a277-d1006f943edd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8eaf34-057f-47a4-b1f2-a5d2c2135ef7", "sighting_of_ref": "indicator--0c0065ae-407a-42f7-b29f-a6d70335ecd8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d452589-c4be-4e80-9360-61381da5f778", "sighting_of_ref": "indicator--53468cb6-3f64-40b6-b77e-96cf2be8b36e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b367d8e8-5c69-4e8a-ac71-32291e02db57", "sighting_of_ref": "indicator--48448fce-4dd7-4b0b-8007-735ca6e7eaa0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06eacd8-2fa6-430f-a8ab-c0f5d5098ec7", "sighting_of_ref": "indicator--9ab40001-7abf-407e-9cce-9a8923e3c118", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa2c7a0c-13c1-4f84-8de1-85f65009ba61", "sighting_of_ref": "indicator--9ab40001-7abf-407e-9cce-9a8923e3c118", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ea51d4-a91c-47d6-beb4-ca2314017b1b", "sighting_of_ref": "indicator--feeac26f-d2f5-45eb-b5ff-51544c9041d3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39dc5eed-bc58-4f50-9ee8-d43a35d7dada", "sighting_of_ref": "indicator--94662542-7125-4b0e-8f51-5a0dafa2e7f3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d920bea-04a5-4074-ac44-29093d065909", "sighting_of_ref": "indicator--d88af9d4-55f2-441e-ad71-59a76976a7d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c0d9b9-9c09-4163-8502-9af56a060232", "sighting_of_ref": "indicator--84deca56-4dd0-4cfe-a60a-f81b2a52a632", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9f2f1d-aee1-408e-bd16-6a8cc76b764c", "sighting_of_ref": "indicator--0b30c813-acdf-4212-89d8-15355821b05f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e648f989-6a21-4fbd-835a-a21165b9f3d9", "sighting_of_ref": "indicator--bd5d5edc-219f-4b6d-ae19-358fcee51ea5", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f0dd5fc-f118-42c1-aa2d-b67ab7843403", "sighting_of_ref": "indicator--8bba742b-0da4-43c1-ac7c-50088c23cf0e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15893ba0-9aba-47ac-b18c-f2b022ef2a46", "sighting_of_ref": "indicator--96080f3f-dd83-4406-b483-1f4e62ea61db", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78dc326e-7ff0-4017-a803-9e6705e73905", "sighting_of_ref": "indicator--784b1e88-875c-4343-ab59-659304653237", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51ffedc-33f1-49f1-81e7-81056b040f63", "sighting_of_ref": "indicator--f7696782-9b96-4879-bfe4-516119b3f8b6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e0fd80d-3f05-4f72-aad7-ee538f8a5fe4", "sighting_of_ref": "indicator--84e39660-1945-440e-9576-c384cec78c94", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd702b0-26e9-47f6-9055-e37e8d455d50", "sighting_of_ref": "indicator--2f7e6e0f-eb3b-4b3d-a671-67946367c4b1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a49ce55-07ca-4ae9-9cc4-dc5638f4437f", "sighting_of_ref": "indicator--32d58c8f-fd86-49fe-838a-cb4378e07b6f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--028c6c98-04e0-4fd1-95e0-74bc01ac0107", "sighting_of_ref": "indicator--e25ad928-6c53-4294-9ec6-4da1ed014552", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d46e2a7-92e7-46b9-ae39-4dd257d296fc", "sighting_of_ref": "indicator--f3a0154c-feb1-4774-a3b7-a14c226ea4b9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9cfbbf-75f3-439f-b142-10a183fc2d52", "sighting_of_ref": "indicator--155bb794-e456-44ca-98da-5d375f640dc9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c9718f-3451-4317-9de7-fc7d1a7af64f", "sighting_of_ref": "indicator--b1883b60-d447-44e5-89c9-0c4034032dcb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e879568-780b-422b-b566-f872602c2054", "sighting_of_ref": "indicator--19bfc91d-f470-42da-ad0c-b0383a462f96", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b182b13-340e-46e1-8465-c60112dcb1a4", "sighting_of_ref": "indicator--f2633528-4ff8-4cba-9221-e173bfe11427", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e3b1639-d7c1-4342-9e8a-cb597f49bc7e", "sighting_of_ref": "indicator--e95722b1-2ee7-455e-8da1-a8d04f5b5d0a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a11352-790e-4674-b94b-1646f2be1941", "sighting_of_ref": "indicator--6c7abfdf-bd2b-46a2-b963-e2beb932abb2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd1acff-73cb-4168-9c39-05c4218106aa", "sighting_of_ref": "indicator--dbe242cf-e43a-4593-a59b-c8fe3c206774", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d43a8ff-e2ce-4f12-ac08-590c912414ad", "sighting_of_ref": "indicator--58fe28a5-c9c2-401b-ad15-a38bc858f34d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a84e3d5-c0ca-4555-83d3-ff39a9c1c35b", "sighting_of_ref": "indicator--38e9e301-b586-4e14-a0bb-742d7d3c3de7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e9040a-fca3-4cbd-bab0-8e948ffaca25", "sighting_of_ref": "indicator--30b93156-5b04-47b6-a009-9f7aa80bf9f1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04abddd-25cc-4560-990b-5b11a7a287cb", "sighting_of_ref": "indicator--dfa6281a-8aa2-423b-90f2-483b5196ddaa", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d74a89-caa9-43b1-adc5-3087c759edc1", "sighting_of_ref": "indicator--17562d2d-87ef-4642-a9ec-2d3940eca8b2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b439e5b8-efc6-4051-bc30-7a4608681874", "sighting_of_ref": "indicator--aee4002b-1882-4165-a7a9-2776bad99d3a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7819dcc6-b972-4dc3-8845-b3fb28a07b30", "sighting_of_ref": "indicator--67034843-8612-46ea-a88b-fb7f19863713", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11fae828-152c-41da-874a-af669d206624", "sighting_of_ref": "indicator--507a635f-b70b-4700-b6bc-faa8139c2f50", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b4a36b3-f5bf-4892-b447-382f1a89bba7", "sighting_of_ref": "indicator--7aa03430-0f37-4164-8fa3-2ebd476003c4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--758d5a1a-4a34-47f9-926a-2be6a8ee75e8", "sighting_of_ref": "indicator--a1c13841-63f8-4099-98f8-ae16ce035b2c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff316f14-e7a3-4eb9-a86c-68ec1128290a", "sighting_of_ref": "indicator--57fd2d84-bed5-44ee-95f7-4c35a3ff7a02", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74447162-ed44-4585-8511-7929ceb82590", "sighting_of_ref": "indicator--bc646a06-3158-42a9-ab94-24001e41bda8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8baa39-9b99-44a7-8b44-927284988cd7", "sighting_of_ref": "indicator--f91791bb-d76a-4cc8-b575-0dd7d668839a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b5a836b-7f90-4e27-a170-0beb27a1442c", "sighting_of_ref": "indicator--36d9b55e-b791-4163-9288-b343254d6840", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9eb7435-55d4-45c0-9b07-fcb72fbf51fd", "sighting_of_ref": "indicator--061b04c3-0d40-4302-aa6c-6b44db44da8a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610574cf-874d-4c64-b5cd-447d10e363ca", "sighting_of_ref": "indicator--3e349379-109f-4e6b-821a-5417c57298d2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0da5af3-4ae4-4bac-89db-1a90e6014c1b", "sighting_of_ref": "indicator--1a28a3f3-37d3-4278-b87d-49cb8fdab9af", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adcde9f9-a836-4b01-ae5b-64aeddf49d01", "sighting_of_ref": "indicator--4b3c6953-8a90-418b-8124-0ff94b72fc42", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431e23f8-ac15-4aca-bb29-3252cbf4d398", "sighting_of_ref": "indicator--043a83fa-b3e7-4a61-a508-dffa3a50e602", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e448df-7f66-453c-b14e-429ad427dfd6", "sighting_of_ref": "indicator--27ee70a6-69a9-439e-8102-d22c2e27d4d3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f52000-2098-4299-b444-f74923568ac7", "sighting_of_ref": "indicator--a95f50b6-052c-4b0b-9c79-125569225c6e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b80ced-0de3-4060-bcb6-c0ec9f8cad65", "sighting_of_ref": "indicator--97f81dda-bb77-42c1-aa5e-349f98133060", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4529de8e-da3e-4592-9ee3-d6d008abf020", "sighting_of_ref": "indicator--1101434f-7f05-424d-be11-3fbb4e4692a2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1840b9-4d5e-4bd9-b26f-920709ce4101", "sighting_of_ref": "indicator--64f81a8f-f59b-4dbd-a33a-b739bf72bcd8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a14a3c20-a78a-4de1-9a8e-f4859132ee78", "sighting_of_ref": "indicator--09825423-f520-4e36-b2c0-96e1e5e82de6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4e450b-b1b9-44f2-86f1-7a5b2e0bce36", "sighting_of_ref": "indicator--b7082e21-45ab-4984-94bf-23d152e32b1b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f469726-e32d-4cff-b749-fe5dfb22707e", "sighting_of_ref": "indicator--3b9b3f71-c573-4a4b-bfe2-02b5f640041d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a351ae57-337a-4151-88bc-a00319e7fa38", "sighting_of_ref": "indicator--bca28a14-9991-4a16-b937-5d6c8c950129", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e83419-d0ca-478c-a763-2b57647cb328", "sighting_of_ref": "indicator--8eb36b27-df01-4f94-bb17-1b42b2fb23b7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea7b6af-84b2-417c-83c0-9032678217e0", "sighting_of_ref": "indicator--e001d391-f5e0-40ad-8b44-e78ceeaf55e4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7ff6a6-1102-4ac0-8bf5-e5c1e765e01c", "sighting_of_ref": "indicator--91047ff3-6700-42f0-8743-e6c4411e5f16", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c745c5b8-6aa0-44f9-984a-fab23c771344", "sighting_of_ref": "indicator--62aa90e4-9286-4bb8-a25b-194e82ea495d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2504430d-0b69-47fd-af78-ae651558e456", "sighting_of_ref": "indicator--a59ed5c7-edb6-41ab-a076-6fa840407b43", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f837b315-9827-41cd-b98e-863c8de80d3a", "sighting_of_ref": "indicator--98970f39-6207-4b39-b05e-fb4c32f879ba", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fbabcab-a3f0-47da-a464-9d95c440c39b", "sighting_of_ref": "indicator--ec7e5dc3-449a-49be-afb8-9bdff71c218b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef3899e-2558-4988-af23-5f5358bdc1df", "sighting_of_ref": "indicator--de4230ae-06bb-42e0-b309-a294f1c1a509", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc772dc-1600-45db-a223-1dd943a12d5e", "sighting_of_ref": "indicator--3d626435-4c7e-4cfd-829c-24c960861929", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0814ca0e-fc28-4ddc-afde-3e84964b2a41", "sighting_of_ref": "indicator--093fde6e-6c11-4493-88ad-b1229fd75d92", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--781ee4e1-1b23-4826-9171-c2bac0d89321", "sighting_of_ref": "indicator--3a6f4f54-b700-4e0d-84d1-683aecc96afa", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d401111-4edc-4bdd-86ff-806196ba6174", "sighting_of_ref": "indicator--15666573-2b76-4520-9a2e-3896db4aa0b8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df4a71ae-de04-4109-a5eb-7605be5efb61", "sighting_of_ref": "indicator--40f2c46f-8583-4246-aab8-466042b596c8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a3a9f1f-0dbb-4d83-aa7a-dfd9211b99d9", "sighting_of_ref": "indicator--351fe28f-2df7-4809-af05-7c2c8d15cd3b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3cd368f-816a-4f7a-aee0-e8035c37bf89", "sighting_of_ref": "indicator--17e5f400-9f98-4be6-9c3d-42c1cbeb8ddb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d749fb95-df68-4ce9-8ef5-923a3c75c90f", "sighting_of_ref": "indicator--4f2ea64e-f909-4c71-9bc4-9afd161444c9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3589020-dde6-43c1-8257-cf1cb35e1b81", "sighting_of_ref": "indicator--f93e115e-6fcb-4c8f-b598-f9732604b976", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec4657c-c840-4453-842e-724a733053e9", "sighting_of_ref": "indicator--13a274fc-9260-4424-9c08-593f261dd2da", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc8f5a6-e27b-4968-86a8-9b1918d7c64f", "sighting_of_ref": "indicator--60a52cbb-7b3c-4434-8139-e199997e0b92", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95a5d0e-adf2-466b-a37a-a1cd38034d6a", "sighting_of_ref": "indicator--b9175248-a025-4c99-b174-664bce7255b2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27613ee3-84c2-4986-aed6-8e7a59255112", "sighting_of_ref": "indicator--66eecbc7-7029-42c6-85d6-ec88e6289f83", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51114010-ec6b-48c3-9069-7186cb73b191", "sighting_of_ref": "indicator--15ec6c3c-395f-4e94-bf8a-581fa6567020", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1941a2db-13d9-4d2a-8f77-6f6e0bc1cdd0", "sighting_of_ref": "indicator--75cba11e-02b5-4aae-830a-a65017907c03", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--579ba716-bd33-4330-9305-74bf1963811d", "sighting_of_ref": "indicator--ece11d11-0acb-4674-a9cb-afc7856c196a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222e461b-2a96-4e43-9dd2-9767ff3c2222", "sighting_of_ref": "indicator--a445fb40-4544-4545-bc42-95640d2c948a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89686892-9aac-4dd9-ac30-afd2772aca94", "sighting_of_ref": "indicator--8da5db3c-9541-4c8f-ac48-68dca7bbdb18", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e48174-81b0-4c74-89b4-a7cf44494c9c", "sighting_of_ref": "indicator--c7d800ac-7116-402e-9e48-357f8afc1f68", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac6f08a-3f6e-4a03-adea-0b66e39dc379", "sighting_of_ref": "indicator--cf5d6c0b-700a-4317-b386-69655c4f8661", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4943492f-dd9b-47c0-be2e-53a9c0d9517f", "sighting_of_ref": "indicator--b144a2cf-bc9e-4031-94da-390ba302e8d5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a0b68e-9c95-4082-bf16-198f6123c7b1", "sighting_of_ref": "indicator--cc860a45-9ab4-4f46-afa1-776b1f3f71f4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b93b32-bed4-4da2-957f-bee33a811ef4", "sighting_of_ref": "indicator--6ee282d2-9765-477e-8005-17eca31837a2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba53fdba-9a89-4758-876b-214cdde405d3", "sighting_of_ref": "indicator--0131a6c4-1216-419e-bb91-cd81d58fa321", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1472876-6ebc-4925-adab-70e6857390e9", "sighting_of_ref": "indicator--35ca3a63-8534-4ac0-b2c6-3ca1e3bd723a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b64b44ca-3838-4af2-8c0a-c0b96094c0f5", "sighting_of_ref": "indicator--587085c6-30c4-412b-b29e-7903ea191ce7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c73ad88-d22b-4fea-bfc5-cc4fa7e578b3", "sighting_of_ref": "indicator--51e0854d-7d4b-4dae-828c-c530ed6f1760", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ec308d-8d85-4d5d-ad4d-a86f8828e4b3", "sighting_of_ref": "indicator--f6fc940f-a2bd-432a-a0dc-5fb12ac773a7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c683cf-26a5-4265-92ce-3c86778085d7", "sighting_of_ref": "indicator--d38cca0f-cb78-4c14-a4d2-706be98277fe", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b3f951d-3909-48f7-aa11-fe7eebcaf6e3", "sighting_of_ref": "indicator--bd23670e-ead6-4b4b-a3d9-1f5424e15f93", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12439d66-6ea0-4b27-9890-ed630fcdf0c3", "sighting_of_ref": "indicator--5e5b06e2-3d04-48aa-a63f-c266db632e09", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77803fde-1c53-4fc3-bacc-3767abd5cd56", "sighting_of_ref": "indicator--f8e30b21-0cdf-469c-a20d-0d9c1f9e8b13", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a1ac0fd-ec0e-49c7-ace8-ac1834b30e2c", "sighting_of_ref": "indicator--579dc745-70a2-4991-ba70-f15caabcae07", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1ce0ec-5fe8-43af-8a46-eaf0fb53c588", "sighting_of_ref": "indicator--a50d6c94-1781-4b3e-80e8-87d7f7da235d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60572b83-ca7b-4927-baae-5e35f4adc49f", "sighting_of_ref": "indicator--dc732ed3-aeb6-4c23-81c8-c057d8b6434a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe821771-b57e-44f3-b877-6985d4f21313", "sighting_of_ref": "indicator--4cbab7e5-4940-4c7f-95a3-8031d7514abd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09010f4f-05c6-406e-9408-0b5f98a3956a", "sighting_of_ref": "indicator--c0f50bb6-73c1-40be-a201-45d1fd0869c0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3016262-a09b-462e-9ca2-299d6db1b83f", "sighting_of_ref": "indicator--2201bcbd-6c2a-4b8f-acda-13e7879ea5fe", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee230790-3296-4681-8326-c77744295341", "sighting_of_ref": "indicator--f9aa4a12-78e9-4a69-a401-9a32040b6c26", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685eae5b-bd46-4b62-9d2c-d6b39fb06f21", "sighting_of_ref": "indicator--20789889-4345-4230-aaf2-0bec9b6f3f96", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5026db1-cc8a-4c53-9025-2e18ad122b24", "sighting_of_ref": "indicator--36c615c9-c969-4df7-91df-25ab9b0196d6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b012bee-97ff-4842-a4a9-a7c9bc30caeb", "sighting_of_ref": "indicator--79996807-9803-4491-b27a-94c8e3101ded", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886369af-da76-4397-a257-e2172e65c266", "sighting_of_ref": "indicator--2b20303e-2861-446b-8e15-26b870e481f4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c233d54-30e6-444e-b687-295bb864c520", "sighting_of_ref": "indicator--9460cbdd-d82f-469b-94ec-89daaedb67d1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723264b4-9275-47fa-9b8c-c7c415603104", "sighting_of_ref": "indicator--2e9fc87c-e588-4019-87f5-b36ce4a1fb8e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2065ad24-ed72-4496-a65a-d5ffe6880779", "sighting_of_ref": "indicator--3ef0ed21-454b-417d-b033-e1fdccc24593", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d86d011-96ed-40bb-82fc-1a8b60ce142e", "sighting_of_ref": "indicator--ac98eafc-a801-4d63-a77b-2faf1a49ee16", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6678f58-a380-4a18-878c-409c558a355e", "sighting_of_ref": "indicator--5bcc6c5e-b02d-4fcd-85d5-83474a7a877a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f5d809-0bcd-4854-8968-189d27cc86e7", "sighting_of_ref": "indicator--54621ab2-86b6-452a-a75c-812e5b47706c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e21ba5-7e26-4156-980e-8acee1cdb142", "sighting_of_ref": "indicator--9dea238e-7fdd-40e5-8de5-10f7facfa547", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c8b4d5-4995-4e96-84c7-89515bf8b1cf", "sighting_of_ref": "indicator--95f9b171-27d5-4315-be41-ebc80b43bd60", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e4796f0-7c90-4481-9062-83b5d5478cc9", "sighting_of_ref": "indicator--d1a0c2b9-1ff5-4253-9498-147656977d69", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ee064e-7fe8-4a16-9475-e06c74d67f1a", "sighting_of_ref": "indicator--f8fa5917-0261-4649-97e7-86b66ddfcf01", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b96f6b-e03e-45a9-b75b-07049966bd48", "sighting_of_ref": "indicator--d0e5ec9b-622b-4cbb-b140-bfbb967534cb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d44b2b-8195-4cbb-84f8-5394ae292990", "sighting_of_ref": "indicator--70116f77-6bdf-498f-ae2b-3bbb4a31c5a5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5db72da-5ee0-48b6-af72-60c14c913a53", "sighting_of_ref": "indicator--86320789-7360-4c42-940f-8a12a7ccd6a8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f696a9c-252b-42de-8d35-080ad4ad466e", "sighting_of_ref": "indicator--c51fce20-9fae-413c-be06-5f47c6fe7fcf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5881083f-d85a-425c-bbd0-6db3890b5781", "sighting_of_ref": "indicator--fe1fea80-dfeb-4159-937d-f87154746da6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfde5a82-2d39-4d73-9157-d0b426533f65", "sighting_of_ref": "indicator--bfe5c325-b0c9-45c4-8c52-788f71c805d0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b1f6117-0de5-4d9f-8771-84082eb4d685", "sighting_of_ref": "indicator--7b98de25-74f4-4a0e-8920-294316436ffe", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f57a792b-e2e6-4a20-931e-49ab5a2b73cc", "sighting_of_ref": "indicator--156d477f-88ce-48bc-b8de-61541eb032ed", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd1692c-4128-4f7f-ac2a-33443743356b", "sighting_of_ref": "indicator--b31bc9ca-0f32-4e46-96fc-b4c21cad30e0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70672de3-4421-4736-8e5b-a25d5edf58b0", "sighting_of_ref": "indicator--1080a2c3-6482-4dd4-9cd1-dba4e350b72c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b2efcf1-9501-4c76-82a7-f9148d5b8942", "sighting_of_ref": "indicator--8a359427-c21b-42cd-97ce-353f21ba807b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26aa9d54-32f6-44c7-85bf-8d00d6ea487b", "sighting_of_ref": "indicator--334e7d93-a3f7-4b84-ac1b-eb18ad8835a5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e962ae9-6582-40c0-a9df-228cc4fdaf4e", "sighting_of_ref": "indicator--26108108-a41c-4215-a40f-cbb5045b12d1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9187aab6-20f4-4134-9a5f-7fabde7efd95", "sighting_of_ref": "indicator--7753c9e2-c7cc-40e8-b9e4-168e5b84e35f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33984f31-f11b-4706-9c97-b12c84a2d113", "sighting_of_ref": "indicator--af744991-6b45-43ae-ab78-5dba3dd3ec6e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94682bb8-4878-488c-af3b-887177a296f8", "sighting_of_ref": "indicator--dd112477-3ed3-4016-9d58-3b2de3bcf7af", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5725460-cd16-4da2-a5bf-74f9076df71f", "sighting_of_ref": "indicator--abf76a62-c3c0-4b9f-aa22-3d02cc618430", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a851d836-c6fe-4d4f-80ca-479fc96c482e", "sighting_of_ref": "indicator--0850a5e3-1fb3-4596-bca5-11fad65132d2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8891b8f-24df-4aa7-b62d-b63e5c0899c6", "sighting_of_ref": "indicator--f626bab9-62c9-48c5-a543-e251210cf19e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad465840-2dbb-4b4d-a05d-31d17b0a2a3b", "sighting_of_ref": "indicator--b343c6be-5fc1-4119-acc2-707c12b39ee8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a24395-0eb8-4f88-b233-b586439d559e", "sighting_of_ref": "indicator--ff08e9d4-d3df-4e6b-bd45-042e19e7bd78", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62fe351-bc3c-4656-b364-6016b6e73be1", "sighting_of_ref": "indicator--02247e4d-502c-4824-93db-39c0efde4d14", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c226d9-c15d-4c42-9c71-e4649b04f6ee", "sighting_of_ref": "indicator--27676b18-ce22-4f90-b094-7e44e62698d2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e8cbac-66fa-4697-9b26-370989ccfc6a", "sighting_of_ref": "indicator--c039a80b-64b1-4c67-ad44-c5fa73d530a8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a821f7-e1cf-4757-93ba-f7490c52b17e", "sighting_of_ref": "indicator--117f3651-281d-4794-a05f-2066258b5ebc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad0b24e-0cdb-4c5e-a73a-ca5b47d18827", "sighting_of_ref": "indicator--6e2c2a13-4355-4913-91ab-37890db0ee0a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776f26a3-3e92-4ea2-9433-7054a25d3f87", "sighting_of_ref": "indicator--e3667dd2-76f6-40da-970d-26689742803e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5f4ec47-d8c0-4ca4-91a4-e7a1e02e35ce", "sighting_of_ref": "indicator--e74e0898-e8e6-4024-b7de-b66c272c7f8f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06bbcfa-ef13-4ccf-9511-0e3dd747bd2e", "sighting_of_ref": "indicator--23a27efe-91b3-40bb-9d4a-f60995705b14", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b70fa4-ea11-4cc8-b6db-424775958de6", "sighting_of_ref": "indicator--265558d1-7d11-4e3b-b095-c50c67acccfd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4d78fe-99ef-43a1-85e0-a5d119b0af05", "sighting_of_ref": "indicator--d8782f66-5831-4683-b31f-11be6319ad8e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72396334-d369-4cc9-992b-c7e685a175fa", "sighting_of_ref": "indicator--752e2bff-64ff-4013-b024-cac4260e279a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c89fa528-0fe9-4a61-a6ab-317424f687a6", "sighting_of_ref": "indicator--2145f9d9-becc-4305-b4bc-f7ff46d70f3f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d325ce-e51d-48c6-a4f2-21fb637b68c3", "sighting_of_ref": "indicator--b292857f-ecd5-4681-9503-29ecd6cb3528", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f647ec8e-433b-4f86-b5b1-aba75da022e3", "sighting_of_ref": "indicator--2934b98e-df55-4aca-aade-98a7540d8925", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f7dd686-98cf-4b6f-83a2-61be0b6757c1", "sighting_of_ref": "indicator--3199c9b9-3deb-4f08-b071-4c86c6055ba5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2accb5de-fc27-45de-a742-b2fa94a8de8c", "sighting_of_ref": "indicator--3f71b7db-a719-4bae-81cf-381552e4fa32", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941c101f-6a2f-4a1c-808f-99c8905e3a39", "sighting_of_ref": "indicator--335ea6fc-f915-4e2b-8639-4684566ac1b4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efad894c-41dc-4a10-921e-6d1808a68188", "sighting_of_ref": "indicator--61a06e69-8dd4-4a75-88d8-3fd79f9f0ca2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f951c89-9e07-4a7c-b7da-75234cc3e829", "sighting_of_ref": "indicator--c72cab9b-fde4-48db-b5ae-db9bf902a295", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe52caad-07c7-4d6d-a05a-50a96873cb60", "sighting_of_ref": "indicator--e19bd708-8410-45e4-bbb0-6a5bc1948e88", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b47a15-7d6a-42aa-bc22-eeee78d2905d", "sighting_of_ref": "indicator--ca291fe8-61b6-45b0-abf0-852e115ad330", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a789ab6-22d3-40ac-9d49-42a69397f3f5", "sighting_of_ref": "indicator--a052e43b-d99d-4ffc-a0d5-13916667d752", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb625f90-c4cb-4d4c-b19c-3a8fd3d64a54", "sighting_of_ref": "indicator--109765ba-0f93-4c7e-ad4a-be2d165c6685", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6936f84-a79d-42e3-8637-5f071084c565", "sighting_of_ref": "indicator--9f8289ff-61fd-4f4e-9bc9-6009fb1f49f3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650e0d21-4e7b-4170-b01a-7fa86d10c7f3", "sighting_of_ref": "indicator--10708d54-8137-460b-a346-77b34bb86434", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae9dd74-d728-4c2e-a65e-000a0d760fec", "sighting_of_ref": "indicator--7e7a3e3b-cc72-432b-a291-f577b4c77696", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c8b698-d779-4df0-bf6d-4e5ba13d3e7c", "sighting_of_ref": "indicator--ce2489b5-adbe-4dd7-9313-038dac742d65", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b06745-4334-4153-80ad-ca69587b6993", "sighting_of_ref": "indicator--de002625-9e1e-40d5-bb88-76eab206fadf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e997618-78d3-4587-b090-9ce58efc593f", "sighting_of_ref": "indicator--d6864939-3b6c-4080-87f3-1b16a9df6c0a", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d4e126-46a1-4bf3-ac90-6b9a1a11e4a1", "sighting_of_ref": "indicator--f4251a5c-9ee2-4103-bacb-900449190c63", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e19f6a5-8117-49e4-a3dd-da73c50bd4ab", "sighting_of_ref": "indicator--513c3f51-0b12-4674-ac6d-f493efb1332f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e6b529-d0a0-4609-87d1-f394bba95eb8", "sighting_of_ref": "indicator--a81da991-5276-441e-a150-4939c23539b9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f09888-8212-49ab-a024-ec6ab5a1d5f6", "sighting_of_ref": "indicator--1ca292c7-dce6-432c-99ec-4b586941f68a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2d40b0-09fd-4159-be36-bacb30e61e83", "sighting_of_ref": "indicator--401e5a24-0e5a-488f-b600-67f6b820f2d5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--732b1b73-f0f7-4eb9-bea4-28bbc9c8724b", "sighting_of_ref": "indicator--158db7fa-41a6-4053-8e81-eaff1c1abf46", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--337ecbf5-fb7a-4fd4-901b-525b9b9ae98c", "sighting_of_ref": "indicator--aaa85ae9-64ef-4616-9ad6-6891e7df0189", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23390ea-6307-4359-b025-234e7d2ff5b0", "sighting_of_ref": "indicator--38966284-1f83-4c81-b1cd-812920d8cd3e", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6846124-704a-428e-be85-49f05af9ca4c", "sighting_of_ref": "indicator--c2392eea-c11a-469d-a3ff-2dbfc8bab76c", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cef66af-e6b8-4a5f-bf21-a382e9443447", "sighting_of_ref": "indicator--2fbf0d41-c49c-4fb9-b9bf-67635b55faf3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ac7e0f-8fe9-46d0-9f0f-7e67c312a4e3", "sighting_of_ref": "indicator--9a9897bb-45d8-4236-a149-3d5f0f3c4b14", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b21cf6e-2a6f-42d3-98d0-f0e60a03d5d7", "sighting_of_ref": "indicator--eec5a7c6-c90c-4357-9177-c2a7a72c41a6", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a7647f-403c-42f9-9bdf-3f6aaf760240", "sighting_of_ref": "indicator--919224b3-6192-4846-b722-627b08dd4ad8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7c6a7b-fd89-47e6-ad79-4fbcb3beaac7", "sighting_of_ref": "indicator--e1a4dca3-76b9-4c33-bb1e-bbd1740bec6b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa21dec-754c-4be0-a9fa-87994481fdee", "sighting_of_ref": "indicator--1e75cf92-b397-4177-9cc0-3a53530b4b89", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363389f5-7d96-4d17-875c-a36bf12dd50f", "sighting_of_ref": "indicator--ee76ec81-3d14-4804-a415-9ee0958d7209", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cbc94bc-433f-4211-aabb-f6f43357d881", "sighting_of_ref": "indicator--621a0232-f283-404e-983c-8d4236b9e43c", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c4976a-ff01-46fe-8457-3c4887d449df", "sighting_of_ref": "indicator--9c312d02-8cf2-4ee7-9898-6aa4db611aa4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc63755-e040-4824-ad64-e5603ee24c14", "sighting_of_ref": "indicator--bcf3f1ae-ebcd-420a-b4c6-3c30dd936fab", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d890bc1-8c54-45cb-bf2e-4d82768f0748", "sighting_of_ref": "indicator--c48a0068-83ed-4d72-b84f-8609bf072bf1", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6502ff80-aea8-4741-8d52-017c65dbe1ca", "sighting_of_ref": "indicator--3d28da27-672e-44a4-8e2b-540d241df339", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd55dd7-c1d0-4e30-a9e3-eaec50081ab9", "sighting_of_ref": "indicator--fe4f58cc-2713-49bf-a816-d2f349c362f6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd6757e-eab1-4cdf-939b-4b2c4ebcbda8", "sighting_of_ref": "indicator--a36b5d5d-4dd1-4d9b-a526-8736202ff76b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7ccaf0-6143-40fd-955e-853a24cafcef", "sighting_of_ref": "indicator--5ca50744-d654-41a4-9f71-ba81f10db5aa", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b8a325a-764b-406e-b976-aba8bc024eef", "sighting_of_ref": "indicator--a316d3d8-4456-469b-bbec-ddef46d64437", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b37dac69-f15d-44f7-b38b-e81dcc7aab9c", "sighting_of_ref": "indicator--f6b690b0-3fe7-4f29-a5d6-15a9dacc4b5b", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c22344b6-51cf-44a1-9f74-66874813b437", "sighting_of_ref": "indicator--242e1770-e9e0-49dd-a6c3-a24eec8bf140", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529147f8-ea05-48a2-95de-baabfbcc7778", "sighting_of_ref": "indicator--cb9ece3e-9bd6-4435-8894-2ecfc4e77e01", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba442b8-8614-43f3-869f-1a8bb94a7bca", "sighting_of_ref": "indicator--98db578e-615d-443e-937f-17779fe4a359", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a347165-f0d6-4bc7-9a91-ce4f59c08fa8", "sighting_of_ref": "indicator--e03c4549-ff16-47f0-85ae-fcf82c169abe", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b17443-3669-425d-8c9c-585de49468ec", "sighting_of_ref": "indicator--3baae9ec-2030-45af-a276-9caa9079206c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec2c5ab-de1e-4fbc-8207-fcee9ceb6344", "sighting_of_ref": "indicator--e5383f6d-d2be-43f8-8ab4-6e737eef614a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbcbb97e-f092-4802-a7f1-04601e4e9ba6", "sighting_of_ref": "indicator--f7025048-a89c-4d46-b7ae-1c74fcdc7c4c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb65356-d32a-48b3-bef2-9ab92b42a547", "sighting_of_ref": "indicator--22ef99d0-e87c-4263-8813-585361f0f98e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a4af57-1369-4203-b789-3f07161d4d97", "sighting_of_ref": "indicator--d27f86ee-4039-4dc0-90e2-2a1a0a4e513d", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10c52bc-fdd8-486f-8d6b-93e1fb633a0b", "sighting_of_ref": "indicator--91316803-eb66-43f3-8978-35b960023106", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef16aaf-9e75-48c4-84af-782922ecf238", "sighting_of_ref": "indicator--87a9891b-3f36-4352-9a8f-dbd852c8bc5b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc93f566-873e-465d-8eb1-5f68c51f9b7b", "sighting_of_ref": "indicator--ae6365b2-e3b5-4e6b-89e9-06503f34d80f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--624e9427-15f1-47ac-b072-548310dc3b73", "sighting_of_ref": "indicator--ccfcdbb7-6dec-4d76-9162-c102bb7ff870", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e3cec13-7566-45c9-b890-80f7eec483a2", "sighting_of_ref": "indicator--2fb1108a-3863-4f36-bc22-3d6d9d685afb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a50904-919b-43fa-92c6-ef0560fec090", "sighting_of_ref": "indicator--0896e5a3-8533-48d3-bd1e-347e13c3775b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b5d4196-e876-43fa-830a-cb00ffa11795", "sighting_of_ref": "indicator--8ea6cb01-e3e6-4de4-a392-6318114a788a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08418d1c-7bca-4255-8e09-4dfd70ecb0b1", "sighting_of_ref": "indicator--fd55fe89-4759-48f9-8fe7-ca7d4dfad68b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b9c8b9-ec82-4fee-9d76-10d6f2143251", "sighting_of_ref": "indicator--5550dbd7-9cc5-46af-a3d6-07fc2ef60c27", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf2196e1-85c2-44e4-a344-00694d5824fa", "sighting_of_ref": "indicator--def4b5bb-22c8-4c90-abd6-747f58fbbe1a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a7a57d-3be2-4da0-b5ff-9baff7eb5354", "sighting_of_ref": "indicator--def4b5bb-22c8-4c90-abd6-747f58fbbe1a", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75dc7628-0763-4f24-84c7-04f15b9d9ff2", "sighting_of_ref": "indicator--0f5df6b5-026b-4339-96e9-9277dbe98cbd", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346376f6-c0e5-40c3-acf6-a6385f8b7017", "sighting_of_ref": "indicator--0f5df6b5-026b-4339-96e9-9277dbe98cbd", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab3bed1-31b2-4893-b9b9-61c13597dd13", "sighting_of_ref": "indicator--9f5b1afe-24d1-49d5-a6c8-eb19253b2493", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a9ae25-1ad8-4a3c-a6ca-3c637ddfa93e", "sighting_of_ref": "indicator--abbcb265-85fd-462c-8fc2-0c9c6e76e4cc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4175ebef-255f-4c04-b31d-05fa3a0cc547", "sighting_of_ref": "indicator--80617edb-c465-4b19-af88-53526d341078", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03542e0-3522-413a-bd5d-6600b62b5f37", "sighting_of_ref": "indicator--cea17cc3-163b-4d47-8ded-5f598753175b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d8fce81-5761-4c7e-8e55-7374fe6cfd33", "sighting_of_ref": "indicator--b737e253-b043-4c8e-886d-35e109d7fe71", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a86ec19-2305-412d-8c0e-b350bbbc4946", "sighting_of_ref": "indicator--0e754b71-6da3-4c8b-90dd-9159a095a662", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3517f5a-cde3-441a-96cc-68bfd8bc3e41", "sighting_of_ref": "indicator--f75b8cd3-5399-4fe3-88b4-4e6dbae476df", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0316eb-8e75-4579-b14f-81ff0e19f8cd", "sighting_of_ref": "indicator--f16e50c3-cce4-4068-8c7f-b805daee2e7e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da604760-b66f-4e21-8595-ed9fd6fda915", "sighting_of_ref": "indicator--77e820d6-57d1-446b-8fe1-01ef86312947", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7160cd4-1810-46f1-887b-4e787c0bbe90", "sighting_of_ref": "indicator--6f99768c-d502-4274-90f8-56ff7d9d2d2c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8cb06d-afb7-481b-9de8-02353ad83ad9", "sighting_of_ref": "indicator--4dbe2f91-df6b-4c47-83af-811b084a539f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de197854-aab3-485a-b2b6-5fb5737d3bd5", "sighting_of_ref": "indicator--b2cbc98f-048f-4c4d-828b-1740fb666dca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c07937-d973-468e-9f4d-07ba586bf963", "sighting_of_ref": "indicator--039f0331-90e4-4310-9958-1f1a7f875ccd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a10cb76-f561-4ae5-9a31-8351216617ad", "sighting_of_ref": "indicator--be12ed7c-e9ca-4bfb-a0e3-3c91c0d7bedd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27171e57-da47-454e-92ff-c4e77ad66ae4", "sighting_of_ref": "indicator--ec88cd8e-e057-4eaf-a370-0c3041dd1f3e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a9660c4-82dd-4a06-baf5-0352d293145c", "sighting_of_ref": "indicator--386c6f3f-32d0-4f66-8c38-4a39e07359f5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759e8fee-04ee-41a6-ba6e-ad3c8a2748f7", "sighting_of_ref": "indicator--966c8553-a51b-4027-a767-2b30efabbb63", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73dd5b60-54b2-47f6-8990-c967250b2f28", "sighting_of_ref": "indicator--0697f2e8-04ac-4877-aca1-ead100090f7e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01fdeb5b-96c7-4eb2-93d5-11d00982538e", "sighting_of_ref": "indicator--74830856-2ad7-4e03-96be-05172520f829", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344c29cb-aa50-4254-8d97-2fd65739d2c9", "sighting_of_ref": "indicator--7e800a71-9d2a-4f1a-90eb-0c0f7c1ec77b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd61ee95-c4d8-448f-a4e3-45d51eab8e3a", "sighting_of_ref": "indicator--551f497e-8372-48a6-9e6d-ff3edf8f2bf7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--601fe69e-0aaa-444b-999e-e8a5411ad887", "sighting_of_ref": "indicator--6d23248c-06ec-47bc-8290-d2605f574d9b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f651bd-0d98-429f-b58f-508aef082317", "sighting_of_ref": "indicator--e2683a17-1040-49c5-bbdf-3e38707a23dd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8767171-1516-461c-8522-a7860f4e7764", "sighting_of_ref": "indicator--5a377a77-7301-4926-a2d4-09d8d9ead128", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d119e4-e10a-4d1a-8e20-8be7df6d272a", "sighting_of_ref": "indicator--20db8600-445b-4f62-9f87-cb859087858a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7631656-b948-4a77-a540-4de7efaa78ac", "sighting_of_ref": "indicator--a34dbdec-faa5-4190-b7b5-0e4dee1e2e4c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a3bac8-6424-4778-befb-88a01f3084aa", "sighting_of_ref": "indicator--bb377601-72c9-453d-857c-dd9fb90964c9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7434752e-f3db-47d7-a96e-e548aa7e9d72", "sighting_of_ref": "indicator--a69c4b67-2139-418c-bd24-a3143da4dd7f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29dc7e57-370d-4a6c-8b1c-39071f90a9a3", "sighting_of_ref": "indicator--510a216f-5f3e-4a4d-81f0-bc8eeb214096", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a47c8b-6f11-4166-8147-29cf8d8276ac", "sighting_of_ref": "indicator--702d16a3-5f33-4cd4-85a5-086764c54eff", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a441094-74b0-4054-bbd4-0aabe84faa19", "sighting_of_ref": "indicator--a3ec8f3e-8396-42a1-8862-85e3f6583e93", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76cdfca2-9a4a-46c1-b0a6-31db34605084", "sighting_of_ref": "indicator--027264ab-2d21-47f6-942b-f5f1a2203e27", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc8502b-afc8-4721-ab30-5d2a147c1ce4", "sighting_of_ref": "indicator--027264ab-2d21-47f6-942b-f5f1a2203e27", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9f6159-2f49-4561-84b0-b81005d75d32", "sighting_of_ref": "indicator--2e3779ce-242a-4b64-a74d-a1274276f1ad", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de76b83-4459-41aa-ae11-93b1a932d20c", "sighting_of_ref": "indicator--1d46ba68-6fd2-47b8-8aca-896b48d356c5", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4079853-83d4-41aa-9fba-6ffd2794e38c", "sighting_of_ref": "indicator--f55c250f-2070-4c94-ae7e-48299400fe72", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3be8f3-77a1-46d2-8512-6aeac4a95490", "sighting_of_ref": "indicator--f56d47d4-1e9d-4629-83cc-7f1827940136", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45f43ac3-1e41-464a-af22-de3fc53b933c", "sighting_of_ref": "indicator--62a91061-59fe-4b0e-aaec-e2c27f96186d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae81c1c8-1117-40ba-8b37-52d45e79631c", "sighting_of_ref": "indicator--624ec57d-ce5d-4a17-9f27-37339fa0015e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34e1f7f0-0af2-4eca-bbb2-ab9ffeda01cc", "sighting_of_ref": "indicator--9d0247c1-16e8-4c07-b758-3860c0da619f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6919c6a9-83f0-4332-b75f-cc5bb3dbf427", "sighting_of_ref": "indicator--32f25440-7301-4149-aff3-7d86d926c608", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84d970c-cc7d-448d-9a05-eb8570470fc0", "sighting_of_ref": "indicator--a80736f4-07cf-4100-bb62-84ac747eb153", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1227d62d-9ceb-4025-a6c3-5839a0201c0a", "sighting_of_ref": "indicator--5fa51ba7-eb8f-4d47-93e5-ccceb560c310", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07df886-679b-450c-b188-fbea0f1e01fd", "sighting_of_ref": "indicator--3cb70a18-5443-442f-9c39-07c648dba3d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948047de-140e-4f55-97f6-d41f6138c28a", "sighting_of_ref": "indicator--3f25eaa5-dd8e-40b2-b26e-8f393b962cc3", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4e5990-a561-47f8-819c-627c9361be7c", "sighting_of_ref": "indicator--5d681059-ce2a-49f9-8361-46f4afd0fb20", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ca016e-b2f9-486a-8158-92da6a96a7a9", "sighting_of_ref": "indicator--9cd230d8-a960-4ff1-9ad4-348857c51232", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee25a9be-55ff-4618-810f-20801ff53b0c", "sighting_of_ref": "indicator--92f43373-d52a-4e59-a74f-f1744cb9af30", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d20cb0e-c167-49ab-a7cd-18692246af4c", "sighting_of_ref": "indicator--7473e2f7-1ac7-44cb-8357-9c9b13ab3e49", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e2e46f-049e-455d-8c35-0ff8a0628e62", "sighting_of_ref": "indicator--b60cc6bd-4ea1-4f04-ad29-ec8506dfd3fd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2269a7c-c8ce-429c-a8c6-18c04f2abe94", "sighting_of_ref": "indicator--13a8db2c-90bc-4701-a01f-e5d9c2958e62", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1ef516-9000-4c0c-8365-815197852950", "sighting_of_ref": "indicator--0a67c4ed-8a25-4729-9cf0-59e9f13a956a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a5dbc0-50f0-4859-8c20-75e6859c4f1d", "sighting_of_ref": "indicator--6febaf47-6532-4ed1-b19c-10cdce0fa2b9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dbe26bb-14af-483c-85ca-fcde4d5e153f", "sighting_of_ref": "indicator--362cbd8f-39e1-455b-8b0b-51b2997a098d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c3f3c85-7419-46bd-893e-e9fa1244cd7a", "sighting_of_ref": "indicator--632446f8-2647-4636-8a2c-1b0a400d46d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3acdef63-8c8c-45cf-97f4-57f1d7443525", "sighting_of_ref": "indicator--13135763-0b82-4cf0-81f4-79ecec1e726f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--039450a3-9fb5-4e17-ae33-f24ec8777fff", "sighting_of_ref": "indicator--42e635f9-013c-4b01-9352-3de3568290bb", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ef0c1a-d853-4637-9a83-dee61e79acc6", "sighting_of_ref": "indicator--b57b47fe-bde3-47f2-9a4e-1f2b2df1d049", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c813889-1841-4f27-82ad-3b6f243f0689", "sighting_of_ref": "indicator--429755a1-abf8-49b7-b120-dcf0c3b5f9aa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ce1f0f-2a0b-435f-9fe6-18da1fd0b590", "sighting_of_ref": "indicator--51207a25-c62c-4aae-882c-38e2c1cfe96e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85fe53e-83a8-44b7-882f-9605ed359704", "sighting_of_ref": "indicator--c951427a-3a4f-414a-8d9e-e826dea99658", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108ad727-3825-4fe0-8a5e-745a7227767b", "sighting_of_ref": "indicator--450e76eb-d299-47ff-924e-c83dc2021f83", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b155d03-d18d-4f32-8a22-5d5f9c465ec0", "sighting_of_ref": "indicator--c8961a10-77b7-4bec-9ed7-d25b1f5753bc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93f5c13-7680-4208-9a71-e525022389ea", "sighting_of_ref": "indicator--56e9c6d2-0c06-4506-8de0-83dd9574e0c4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e6bd99-f981-49f9-8169-5ed794494c3e", "sighting_of_ref": "indicator--90733ce3-189a-4ae5-9a5e-8921223d9fac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7f0410-7d9d-482d-b5c3-358acf0f2ada", "sighting_of_ref": "indicator--bc9a36b0-25ee-49ef-bca4-159af3d4e4b6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d70159-4359-4f46-a4c9-ffca4d5c699a", "sighting_of_ref": "indicator--992dce87-32b7-4fb4-989f-291ed5a3f666", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--579e33f2-bde6-4a81-9514-9d410fe177bd", "sighting_of_ref": "indicator--3b0d59f7-a830-45f2-b70e-20020d42c09a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--820e7eba-4567-49dd-8cd3-60ca43e357ab", "sighting_of_ref": "indicator--4ffad35f-0fb3-48e0-8c40-d8997ce94e9b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f9f654-2d68-43b2-bf33-f58225f8c9ba", "sighting_of_ref": "indicator--bf98d270-a949-4631-9d3e-851b0ac693aa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b45b0520-2a59-4793-9cd7-3969d44885d8", "sighting_of_ref": "indicator--e3c510f0-3321-4ed8-bc77-2b7ddf6237c9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8183059d-3af1-4149-aa94-a7d9c5ed74c5", "sighting_of_ref": "indicator--2f3a4d7f-ad89-47c4-8dec-3ee3e59a9cb6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fdf361a-e036-40ce-876b-d9dba6e66db4", "sighting_of_ref": "indicator--9174bb44-bf2e-417c-a891-6e910cd59656", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a4df04-44fa-4374-85ba-ea49c78edc74", "sighting_of_ref": "indicator--77df95e1-d785-4e92-99a3-3b533d76fb4a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b04d1e2-6d84-4887-8a9c-740228338541", "sighting_of_ref": "indicator--8b689994-e057-42ee-b132-61f0689a3b80", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d62e503d-aa6c-4df6-b98d-2a94012ac6e8", "sighting_of_ref": "indicator--afbdebfa-16b2-4c69-b3eb-75a137727e9c", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d439107-c175-4123-92c4-d31ec020f5fd", "sighting_of_ref": "indicator--1bcec044-79b2-437e-8c31-ea010fb15c41", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446e5b1d-5fc4-4c1c-b8bc-b6a162fdf6e5", "sighting_of_ref": "indicator--2b6606d1-1189-40e5-9268-e04cc015ea58", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e4716f2-fbc3-4744-aed9-6d2349b47efc", "sighting_of_ref": "indicator--156f0e9f-cf4c-4da5-833d-7dfc34fab7c5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef206abc-ea62-4db2-af33-34bf642e5d73", "sighting_of_ref": "indicator--c9ccdc13-43c3-4d80-9162-7fcf7fc97bb7", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45b3ca8f-162f-414a-886a-23e309d9d96f", "sighting_of_ref": "indicator--c9ccdc13-43c3-4d80-9162-7fcf7fc97bb7", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b6d9aa-ee77-48d2-805b-d351bc3a6357", "sighting_of_ref": "indicator--b5dce30b-45e5-4d32-ab6e-714bedd1b3f4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f3b141-cabc-4ec1-87ed-606d51569772", "sighting_of_ref": "indicator--8a3fbd70-09be-479a-95c9-6104d466a72a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c940d3c-e71d-4026-a4e5-d69bb58161c7", "sighting_of_ref": "indicator--f69a5f61-b9db-404c-8e0c-aa6fc3568d71", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90de85c8-8d2d-48ed-b487-c17ff5179e55", "sighting_of_ref": "indicator--2414972f-63c6-46bb-a7d2-c0921fa28f06", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2168a1d9-4cf8-4f14-9597-9d5475e97df7", "sighting_of_ref": "indicator--e5157be6-9d91-4a7a-94d3-33d38e982d1d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8111da9e-2e85-494f-a4d9-51cd293d22e1", "sighting_of_ref": "indicator--00cd2b90-757a-4691-9124-552b8129dc12", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f651b0e0-d830-4bad-b3c8-442b38d26436", "sighting_of_ref": "indicator--e87b3441-f5c3-44d1-b22d-c218c5089c88", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a88e36bd-4907-404a-a876-125e4355350d", "sighting_of_ref": "indicator--4f7bf96d-5f44-4400-b8fd-e20e50e65e64", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dfc3c91-a35f-454b-a952-99b2ff8501f7", "sighting_of_ref": "indicator--36b850d0-1d3e-4d21-9a62-d279a510144f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d805cdc7-16d5-4cfd-aac8-1eafef87824e", "sighting_of_ref": "indicator--3ecfa4ff-67c0-4d79-b428-2da5d40eda15", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4006e740-5957-40f3-ab4a-fdaf1689c3ff", "sighting_of_ref": "indicator--a25d9807-421e-4290-b684-0173b9e33bcb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17630048-4bfb-4e07-a929-4c5d679ee3ba", "sighting_of_ref": "indicator--f1e5329b-402b-405c-9726-b61f1042b18f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6f67e0-0ea7-4739-88c6-e6877b7ce3d9", "sighting_of_ref": "indicator--49d22171-22c0-44bc-a323-015670912c19", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4d2bbd-1b0b-4bbd-a634-c815cf831afe", "sighting_of_ref": "indicator--e606024d-de3b-45e2-acfa-2c2a12863364", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b2e1ad-a18b-47d7-aba9-662df68868e5", "sighting_of_ref": "indicator--648855dd-41a4-4e3e-b54d-3883adefd66f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22dd58bf-e44e-48a3-badf-e0f5a14642a5", "sighting_of_ref": "indicator--32845a74-275b-4de1-a7eb-cf0d4b277b74", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ad6012-3ffb-4972-b04f-0b1b90fa9e9a", "sighting_of_ref": "indicator--c503ef04-de76-4c12-8954-f4d44b218f2b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fbff995-b6a1-4a0e-94fc-c96ffc0bc0ef", "sighting_of_ref": "indicator--03d27e9f-3288-4d73-844c-013ca35128e6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce63a24-5234-40ef-bc78-ce5970d4e8e0", "sighting_of_ref": "indicator--eed678a1-7fc3-490c-a4e6-5e700a214395", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e7bbcd-bd5e-4c04-8809-67491f467865", "sighting_of_ref": "indicator--544528fb-b8d2-4334-9504-d18f64f5c6f2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0242dfa-cbee-46d6-bb2a-551cdfb018d2", "sighting_of_ref": "indicator--6d9e1ff3-2bb2-4104-8d17-f0f1e2d60721", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8fa00b3-2c20-432a-a629-ce530d0acd0b", "sighting_of_ref": "indicator--d42552ea-e5e2-4e7b-9ae5-854a21590ee3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45f398e5-b3dd-4b52-8513-4b39cfc57441", "sighting_of_ref": "indicator--c5280d02-3a84-4dc9-ba9c-2714a25fe3ae", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--105d8937-0d2c-4062-8b6d-ff4cda90ac42", "sighting_of_ref": "indicator--90c09fcb-3513-4e37-b1ab-9779a6d13a43", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87c1ae75-a968-47d8-8c63-273c79c05652", "sighting_of_ref": "indicator--d219a15b-8a9f-4384-bebd-530bb6c0ad0e", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba004b31-a16e-4218-aff7-f5a5c363c003", "sighting_of_ref": "indicator--d219a15b-8a9f-4384-bebd-530bb6c0ad0e", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815cfddc-4149-4189-b4b5-5583d38bd05a", "sighting_of_ref": "indicator--bb147bae-227f-4b4d-9bc5-1186b2ed1a11", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b810fb-7e89-4fb4-a7a9-c11277bb22bb", "sighting_of_ref": "indicator--bb147bae-227f-4b4d-9bc5-1186b2ed1a11", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165df24a-327c-4d28-b440-2d22f4d5e77c", "sighting_of_ref": "indicator--bb147bae-227f-4b4d-9bc5-1186b2ed1a11", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58bfa140-86ff-440a-8c64-7268b75e9a84", "sighting_of_ref": "indicator--bb147bae-227f-4b4d-9bc5-1186b2ed1a11", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4e28d4-5728-4e5a-8be6-0a2c641bd23a", "sighting_of_ref": "indicator--56c4e3c8-9738-4568-a71f-29d47cdc5587", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f3a9a3-e645-4f7e-898b-fb3dffccc011", "sighting_of_ref": "indicator--56c4e3c8-9738-4568-a71f-29d47cdc5587", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d436145-c8db-4e64-b511-43ef89d17ab8", "sighting_of_ref": "indicator--e4cb48c0-18e5-4e55-88f9-2730b90358ff", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7834df-d73d-4554-b44b-990f15125778", "sighting_of_ref": "indicator--e4cb48c0-18e5-4e55-88f9-2730b90358ff", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e92dd47-b933-4076-8c80-5d7de8c3c4de", "sighting_of_ref": "indicator--f382de1a-6d2f-4c5e-bd32-58555e277b0f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c12d4ec-ac57-4ad5-a0b9-16f48482079f", "sighting_of_ref": "indicator--f382de1a-6d2f-4c5e-bd32-58555e277b0f", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1a7a20-8662-41de-bfdf-8734aba2d0d4", "sighting_of_ref": "indicator--f31866bc-e2af-45b1-a80d-bce4e0a9fb5c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e379381-5e22-4812-a7aa-1a74871b6b78", "sighting_of_ref": "indicator--f31866bc-e2af-45b1-a80d-bce4e0a9fb5c", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b56704e-4a3a-45b9-b933-d3aa705488ea", "sighting_of_ref": "indicator--594a94ae-bf16-4b2b-8287-c5f5d5c7ef14", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5051c4d4-b71a-4ae9-b6cb-d029a134af55", "sighting_of_ref": "indicator--594a94ae-bf16-4b2b-8287-c5f5d5c7ef14", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8389a8bf-86f9-4003-a1e1-03208b59a85c", "sighting_of_ref": "indicator--3776d9ef-65c8-4535-ab12-bd2a0d2154a4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7456a2ad-9403-4589-8fa9-0ec02785e8df", "sighting_of_ref": "indicator--e82ae7af-d709-4bfc-ab5a-c6e4fb5b5e84", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d6d62f-0405-49a5-8337-b50b1a4f1b1e", "sighting_of_ref": "indicator--1a8a0937-3e5a-4fb1-ad93-83341640b70e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d11371-8580-4e60-8ab3-cfbdf7864238", "sighting_of_ref": "indicator--063fb022-cff4-4b5e-860f-0722e4b34a12", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d5703ad-a59f-4d49-89a3-8711513bf4d1", "sighting_of_ref": "indicator--44e36118-08f9-4271-bebc-fdbdfd0a5d01", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9167166-518a-433c-a848-2d455598968d", "sighting_of_ref": "indicator--ba91ecef-b72e-4c83-85c5-e44369aad373", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05edddf-293d-4cb6-8df8-77a774409a71", "sighting_of_ref": "indicator--c57bb391-dd1e-4268-98ba-042235f3e96b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d0e0d23-d21a-4e54-a17c-89c7cbcc06e3", "sighting_of_ref": "indicator--84433786-9c78-4c8a-8f37-f5bbe0c28d7e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a730a6-f716-4175-8bbb-d9a58c5568f1", "sighting_of_ref": "indicator--d7f40f50-afb9-42f3-a49b-3a1dd0563885", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8e7fef-e162-455f-ab25-75f3bf971da8", "sighting_of_ref": "indicator--c14c820d-e069-48ff-bdf3-131709557444", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51144f1-e1b8-4cba-bc53-a93a82406565", "sighting_of_ref": "indicator--7373267f-0290-4f31-ab41-611c0b5bdf70", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--159dd090-fc77-44b2-a6d3-9329c97b454e", "sighting_of_ref": "indicator--df201aff-3c6e-45f0-ac74-228a9d5ef7e2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d9109e0-2b6f-426c-a7ef-49345236fb7c", "sighting_of_ref": "indicator--dc6a3b5a-f6ff-4a37-ba7c-26537105d86d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcca07aa-b639-4bcb-ae6b-35a0f773ac74", "sighting_of_ref": "indicator--25f1388d-6113-43c8-892a-ab9ab5b5d914", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a283b762-7ae3-4603-8128-6962f5252d7d", "sighting_of_ref": "indicator--c5226cc7-fd94-4b09-98e9-3a4ed9d3e7e2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cfdf279-c1a0-4185-9f3f-f41619afaf68", "sighting_of_ref": "indicator--052a0b37-e49e-4797-8548-83b2ff642823", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50366a2a-0156-4837-a2fb-43eaa14ba164", "sighting_of_ref": "indicator--8b29548c-ce8c-4add-8529-c1b629439e5e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e67d76d-be25-4286-8aef-d6ebc3c3f362", "sighting_of_ref": "indicator--3748d554-5f40-4059-87b5-25b2250091e8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a6880a-b6ad-4730-8429-4d5d1733d63b", "sighting_of_ref": "indicator--19ed0dc8-10e9-4570-bc3f-bfb7771d42ac", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee01c33-2180-4008-ad23-9b14c866cc31", "sighting_of_ref": "indicator--199d36dc-0776-4df5-9592-a467c4eaaacf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f1e2c5-3d28-4b0e-a7a9-9eb2528a6478", "sighting_of_ref": "indicator--c6dd3c46-d270-4fca-ad46-317aded19e50", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a9a3a6-404b-4604-a8dc-2194f0c7fd44", "sighting_of_ref": "indicator--78c1aeb9-ec4b-4764-9919-2bfff6a57d1b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6bd318-a9b5-4ea4-abea-b79ede6702b5", "sighting_of_ref": "indicator--92452023-baa2-4d7a-a30f-70851dbbca74", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd9bda0-c474-439c-b0a2-c9498b5cd22d", "sighting_of_ref": "indicator--a511faa0-f05d-4410-8046-fe92efa92601", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90feae20-c335-454d-b663-63a0a46ad942", "sighting_of_ref": "indicator--a88e59f6-9232-4bde-a972-9f3e08ead059", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae6404c-dff2-40b1-832e-cabfe1b37b30", "sighting_of_ref": "indicator--d3509573-24b3-4dbd-acc7-28a5aa88f15e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81517cb3-e7e4-4f11-95fb-937b66c5bd30", "sighting_of_ref": "indicator--3cf1bb25-148e-43f0-a3b1-11b399752766", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5435d156-96b0-40b3-a243-3d4ef97fe468", "sighting_of_ref": "indicator--e32abd9a-8b0d-44f2-9a80-355b561cd466", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6761765e-e8a8-4459-80b6-4d15534b3b8b", "sighting_of_ref": "indicator--ff80bb68-8f62-4c8f-9c37-3d11867b9dd8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b9b9e04-29b8-4424-98ba-14c41aa32d20", "sighting_of_ref": "indicator--a8ea1650-5c4c-4ed5-9c6c-3f02e1fafaa9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c6b440-fdb6-4788-8fc8-6946b37c9b48", "sighting_of_ref": "indicator--6db995c1-62ba-4209-beda-65855a3be1ef", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ecaeb4e-9f93-484c-bb97-6accf27335bf", "sighting_of_ref": "indicator--4e8e665f-8e08-4568-9b47-5131fc003910", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a27055-01f2-4934-b5c1-eff89c292a0f", "sighting_of_ref": "indicator--fde046f5-9761-420b-b301-6a49db8c0e9e", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c48030d-ade4-42fb-88f3-58aca817a0a8", "sighting_of_ref": "indicator--fb2f47f7-82a6-43ff-977a-c33cff0dc14c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a95d9a1-4744-4d91-8e7d-4246109165c5", "sighting_of_ref": "indicator--d7e1c866-46a2-46be-b994-4d88feb8d95c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2174fa05-c44e-4a58-acc1-a8b1a9925465", "sighting_of_ref": "indicator--259a6f01-1721-490a-861e-969aef5839ee", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ccb9b49-1209-4038-998e-ade53e3a3602", "sighting_of_ref": "indicator--89536bbc-8586-4611-8638-dffc96584afe", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a70e29a-9834-4bd9-b903-e0fe1cbcb84d", "sighting_of_ref": "indicator--9e16da83-2d93-40bd-988a-1c77027dd736", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd7e0b2-6e32-4e69-8356-de92a80a6717", "sighting_of_ref": "indicator--3a1ad158-b43e-4a35-8e15-a966d74db82f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6eccd4-366f-407a-bbc4-0188a84ab93b", "sighting_of_ref": "indicator--40537435-f28e-4df9-a303-5fa665271d5a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5505b8ab-0235-474b-a90f-4e1e3723826f", "sighting_of_ref": "indicator--9d70cac0-5ae8-4014-a6d4-29bc55312299", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca18f263-05ae-45e8-8d9e-be53d1a136f7", "sighting_of_ref": "indicator--cd93e3f3-ce6a-4a71-8cbb-22da84aae73f", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cedd9fd-d916-4e69-84ab-712ca785f485", "sighting_of_ref": "indicator--f376939f-634c-4d6c-bc6b-e3a285001793", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18370a1-6d2f-436a-8ea6-7872021fef8c", "sighting_of_ref": "indicator--f376939f-634c-4d6c-bc6b-e3a285001793", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533babf5-53bc-419f-baa8-80fb1d562483", "sighting_of_ref": "indicator--0a7cf11d-ff1a-4d5a-a2ef-fa53f32e4653", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a949b6-a8be-4f93-96ec-b5985822d89c", "sighting_of_ref": "indicator--3f2458e1-1ece-4b94-a834-658f1443b192", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c1130ad-7628-4c68-bde1-4964444b65d1", "sighting_of_ref": "indicator--6624e910-4456-495e-81df-74d291eb94af", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e196e7-7f08-4392-a758-badd33b1d6b3", "sighting_of_ref": "indicator--7be65b8b-497a-4c95-8ce7-135d205caba0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf8a3ee-c476-4c66-8fc2-3bca887f38c6", "sighting_of_ref": "indicator--b59f0e2a-aa96-45d8-878f-457a8592eff4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce8bfaef-b23d-4f9a-b79a-9a4e8ddbb60d", "sighting_of_ref": "indicator--9cd11f40-3191-4d30-9279-f171f551d6ff", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93f9772-e744-4e43-8315-61a2310c653c", "sighting_of_ref": "indicator--b7c08a44-c8f7-423f-8c0f-c30447aea3d4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34c8002-034f-45a8-ac33-0efb13b57d58", "sighting_of_ref": "indicator--29abd4c6-6a5c-43eb-95ad-7bdd225e3fdd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00b5721-8d17-4959-9f88-026448eb7696", "sighting_of_ref": "indicator--8d5b0231-1136-472a-ad50-5384cf73961e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c2b53a-c97c-4033-a27b-33aa7dc84d9d", "sighting_of_ref": "indicator--85a261cb-92df-4b67-874f-793472602ef4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c86c977f-9135-47e0-8fb4-6a19b3fa83b1", "sighting_of_ref": "indicator--af825dbf-cdc4-4bbf-8463-9cf1cc088e92", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ca9152-4829-4b9b-b4f7-85a3857c72ee", "sighting_of_ref": "indicator--a830c7ce-d02a-4ca3-a430-cb15faf4a33c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b00e4e9d-3854-48db-8f6d-92554aa86f2b", "sighting_of_ref": "indicator--4df43efe-1e14-488b-86bd-a9922ace3e17", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb29900-2b08-4ae9-85b2-a85742dbb53b", "sighting_of_ref": "indicator--b431d9e8-ec1e-432d-80ea-4530791bf8b7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a7c723-ecf7-4cdf-83f3-a5239f965c0c", "sighting_of_ref": "indicator--0fda129a-0b79-42a2-9f5b-c6b5f6abafd7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3ea619-e796-4f9a-a066-1e1d7504bf6e", "sighting_of_ref": "indicator--d43d03a3-d02d-4c42-9182-dec9fd8c412b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bde9c3b-ea58-4277-9d72-73d28a5b56fa", "sighting_of_ref": "indicator--bc8497ec-f2b9-48e3-a8ca-f672a2c1153a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605919c7-1919-4083-8dc0-db3039afc1a6", "sighting_of_ref": "indicator--223c2953-d63a-4d18-8b53-1e726f8e5b13", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca066b00-3da8-4604-bf38-3d908d089f60", "sighting_of_ref": "indicator--a9b6337b-dd2a-4ebe-98ee-81accd1a5e58", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3369803f-7127-4765-8327-1e1ce77cef40", "sighting_of_ref": "indicator--1da57467-7f62-4151-ba86-8d354a9f76a6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87d3dfd-b469-4746-b21e-589f446883f2", "sighting_of_ref": "indicator--08292aaa-04f6-4634-8fad-13c8e610bffa", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec098b14-2010-4c29-a7bc-515884bf35a0", "sighting_of_ref": "indicator--45d347fa-9e84-4d56-8835-08f606a96205", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f5e22e-2f28-445f-ba5e-aae6a7c26c8a", "sighting_of_ref": "indicator--45d347fa-9e84-4d56-8835-08f606a96205", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db9061c-cef2-4cb4-9fe0-7112de38398a", "sighting_of_ref": "indicator--d665e48a-5c68-40e1-9312-b794fd5a041e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4596c38-7b6f-4ad0-8ee1-3cb888c1adf7", "sighting_of_ref": "indicator--dac07909-f330-4497-9f53-7c77030cc2c5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc68839e-dfc1-4b35-ae40-d78432ce3a05", "sighting_of_ref": "indicator--ff41274e-08d7-452a-90a3-b6039e075dc8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e54ece-99cc-49d7-8378-48e5a15d9a06", "sighting_of_ref": "indicator--444fc9fe-9372-4ae3-b2eb-2705282b5a20", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c9df5c-7beb-438c-9bee-5d2ef80e2728", "sighting_of_ref": "indicator--db44ad6f-05ab-4851-aa26-6a722ef3c2b5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b20a61c-fadc-4205-8ccc-41805a472b2c", "sighting_of_ref": "indicator--74f21cc6-7c6f-446c-bde0-57d392811888", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b47d663-7efc-4cf2-83fd-2b0cbb97c93b", "sighting_of_ref": "indicator--9e98605e-a236-46cc-a329-d9c443c329ca", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6da9ea-f511-46b7-ab77-1da06ee4a265", "sighting_of_ref": "indicator--c7beeb54-b727-4c83-8113-878165befc07", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d59c706-3672-4bae-96a0-af6596082b23", "sighting_of_ref": "indicator--d099be71-e8e8-4f2a-b856-aecad9f78a44", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84c8ee9-0e2b-4c8b-96c0-40cc3c2b6d82", "sighting_of_ref": "indicator--49fb84c6-b7ad-4992-8b22-bcd8529152df", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdff16ea-12a1-4f07-b6f9-32d0de9c2fcd", "sighting_of_ref": "indicator--615db431-bbc9-4e3f-ae92-275d6187ffd9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed4e148-ce8e-4ca2-ae44-0b6b6f418d7a", "sighting_of_ref": "indicator--1e78b2e7-422c-4a24-82e6-86fc0de0be79", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15280610-27df-441d-bcfd-dd6435cc7066", "sighting_of_ref": "indicator--fd77a869-d03c-4a95-a50b-e41d5f79f690", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ae9e80-9487-4a68-b643-c9ac68f20d4f", "sighting_of_ref": "indicator--9d43c3e1-de1e-4026-811a-3cfdef1fff8d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22579b4f-f1d2-49f3-b57d-a6a1774b4ff9", "sighting_of_ref": "indicator--b3eb7238-4421-48dd-9413-c24836c1efd3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4ebce3-16ea-4f25-add7-e61e6629aa1d", "sighting_of_ref": "indicator--57c43a61-2e96-4e60-912b-5cbcc752f6d2", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1297bd86-ed4c-4518-9e47-f800f7c3c6b1", "sighting_of_ref": "indicator--23c25efa-72e4-406d-960d-eff1aefec7cf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bebf53d-ba54-46c0-a3f2-e0046bdb459d", "sighting_of_ref": "indicator--dee87b02-52f3-4868-9825-ac76f6e8fd87", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df7b571-a1bb-44f9-9bbd-48ea000cb1fd", "sighting_of_ref": "indicator--a25d58fe-1466-4aa6-805d-9154296df595", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cef43c1-f5d1-4d9b-86c8-fb7964e6b417", "sighting_of_ref": "indicator--0aa899b7-95fd-43f9-aeb5-de79149cb77e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8eed37d-50b8-4698-b741-f1a42c55d895", "sighting_of_ref": "indicator--f965da3f-dbaa-4f85-84f5-856c75e94921", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55ce7b8-106d-4d16-bf04-aee2eac3473e", "sighting_of_ref": "indicator--e5baa147-f35c-4015-87a5-0881d68ec042", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739af208-f318-4316-8e0e-e513e66cd0eb", "sighting_of_ref": "indicator--94a623dd-4abc-4939-94bd-9b134b79c4e6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ad5572-7950-4b90-b38b-517d3e1e4e67", "sighting_of_ref": "indicator--776b26fd-d0ac-4ef6-88f8-b036eb28f0e4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa13ffa-6c7f-4120-b3df-cf2085ab63a3", "sighting_of_ref": "indicator--0409ee07-a2eb-40bd-b245-0e0fc8b9d352", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b2ddea-165a-46e9-8fd2-80e859815739", "sighting_of_ref": "indicator--0bc3e07e-7076-495d-89a0-644494fdc9ed", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a4edc6-f9b1-41ad-846c-ea478f8d3e81", "sighting_of_ref": "indicator--f1024843-2175-4b53-a2b4-c7a919bcc924", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ee6d4c-8aae-4627-8c78-f738910d6538", "sighting_of_ref": "indicator--f44550a0-5be4-45a2-8658-fd3ef3869a75", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897e02b6-213e-4960-9aea-db90bcfaee1f", "sighting_of_ref": "indicator--2a51012c-bff4-4fb6-8e47-47432b904115", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4d3f339-49ea-4125-b3a2-7f276f46976d", "sighting_of_ref": "indicator--1e0db028-498d-4aee-a9b6-5f1b66eb0e6e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a64a08c6-bcae-4958-891f-58b2283ef617", "sighting_of_ref": "indicator--c04eb136-358b-4ae3-8be4-6497229b6140", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd491ce2-9294-4cd2-b463-07d630105c9a", "sighting_of_ref": "indicator--abf98b25-bce7-4116-8def-b6ba28b19371", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c069e37-043c-4a9d-873d-b643344bc549", "sighting_of_ref": "indicator--32158fe4-92ba-441e-8565-71fd12e4abb9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--372f0e01-9043-4eb8-afca-861bd4653a64", "sighting_of_ref": "indicator--b55066da-1495-4a58-bcc9-bdf5fff93ac7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb8fadb-40a0-4641-b5d6-80a045f39c91", "sighting_of_ref": "indicator--ea3b0cd0-9d91-4351-a0cb-0cdf850eefa2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c1a16c-8771-4353-93cf-cbd951538d37", "sighting_of_ref": "indicator--1490a1b6-c525-41fa-8957-bbdee42e42c9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--883dcb03-0aa3-4542-acd0-4204c69ded0e", "sighting_of_ref": "indicator--aa8d8e3d-522c-47ef-b4b5-ad9bd0f55429", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d2cb00-7d3c-4de0-968c-834c88a6a54a", "sighting_of_ref": "indicator--708fc54d-2ee8-40e4-bee7-7f826d6bfe7e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9caa87-27a1-40aa-ae40-8fbee4a36112", "sighting_of_ref": "indicator--9d186c91-3d65-415d-91b0-0c409d70fa57", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1afeab3e-45bb-46d5-97b5-493e438dd62b", "sighting_of_ref": "indicator--ad0cc624-e486-4713-ba3f-4041b268c1cc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5517228a-3528-4f1f-8e30-950096a3fe19", "sighting_of_ref": "indicator--8f6a991a-a86b-420a-89e1-63b601b8c3d0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd397c96-5267-44bf-9ab3-cbc3b2b1c88f", "sighting_of_ref": "indicator--a22836fb-1e27-4f74-8412-a357861048ac", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e59c2e3-6199-47cc-a14a-24a2cf86a299", "sighting_of_ref": "indicator--8c18a50b-8606-45dd-890d-673c72bd0d13", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d2048f-e556-4be3-9d8c-4233d3367208", "sighting_of_ref": "indicator--acaa2139-d963-415d-b800-fe262b249499", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faac655c-4482-4a3c-a8f7-702ab1633077", "sighting_of_ref": "indicator--88add171-79da-4ca1-8aec-78a2e1280ff1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8840fdec-a64e-461f-a882-35dd531c6952", "sighting_of_ref": "indicator--c5acf47e-6c93-4720-ba32-ebda8e7b1991", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d810307-d081-4da0-b86c-75fa8e928d82", "sighting_of_ref": "indicator--6aca4f02-5a4f-4dc4-b763-d1df6cefe915", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e18f57af-45a5-402e-a7eb-a846089420e8", "sighting_of_ref": "indicator--c5b2bff6-cce7-42e3-86d2-d5cd703928d3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--932a6ea8-e322-473a-86db-b78591ea7564", "sighting_of_ref": "indicator--dda5a81c-ab66-4e54-afd3-fa64745073c3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ccdfb1-087b-4c35-92ce-a8855d92d7fa", "sighting_of_ref": "indicator--bc0230d6-29cd-4fb5-9bfe-8f00326e3289", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce462b8-b3a4-4b84-9474-1e90bd5e665c", "sighting_of_ref": "indicator--f1c6fe79-0826-4f29-b8a6-ef434b18f787", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d3155e9-2776-4753-af96-9daabb11079a", "sighting_of_ref": "indicator--499b59ae-fbcb-407e-8701-c1ae122f64d1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b18bddc-709b-4bc5-bcff-0478de2c69fc", "sighting_of_ref": "indicator--70291d67-1efb-4e09-aa3d-444c26ef70e7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e9319d-5e02-42e9-85cf-64764449fb5c", "sighting_of_ref": "indicator--ba8c7b8e-62f8-49a1-a7d1-2b312668c3d0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f33617a4-3548-483c-a18f-c1ee1d7b2baa", "sighting_of_ref": "indicator--6b847f3d-f8bd-450e-ab00-0c6d45eb4d37", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8b922d-00ae-4900-b368-0c18b1fdf2d4", "sighting_of_ref": "indicator--bf574f7a-f3ad-402a-9549-64cef3601e1f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86b42d0f-3bc6-4718-8a75-8e5f11b2d56f", "sighting_of_ref": "indicator--de0983b3-bd8f-4b62-9cdb-1b78d1b1e9bd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48f3119-7fd9-4f9b-afe8-dfa9ee6cb866", "sighting_of_ref": "indicator--9dc8e8ea-3eb2-42c0-9b20-40114e318d95", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c5b27ff-19c4-4c98-a613-b57ca48df62a", "sighting_of_ref": "indicator--ff3412ac-a948-4cae-9578-d8f63b4767a0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--606dbb0e-ba36-4ee1-a390-a73ec456bfbc", "sighting_of_ref": "indicator--a4981d3e-e160-41f6-b11f-c01f21dff3fa", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--510c2c34-3768-4d6e-86cb-40576a2dbb00", "sighting_of_ref": "indicator--da3597de-bad1-4afb-850b-4c13431e2894", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb227c32-2efe-4535-b869-51d61ac41b96", "sighting_of_ref": "indicator--fc8bad76-13c6-44c2-9e1d-645786c04a96", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2233091-0d98-467e-a645-401cdf9d5cca", "sighting_of_ref": "indicator--33cc762d-a523-418e-afac-b6799301652a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c7afd7-c420-46f0-aefb-840425f557d9", "sighting_of_ref": "indicator--d42abad0-a29d-4402-b621-ecfd18698bfc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02444daa-d74e-48cc-af58-5a531dbea286", "sighting_of_ref": "indicator--2a228f70-c14f-4c47-bbf1-12912d166b0b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae6bbcf-54e7-402e-a3cf-e88383ff4422", "sighting_of_ref": "indicator--aceab4f4-6c36-48e2-9115-93340abc921d", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6861ce1-7cf7-437a-886f-995cd148b139", "sighting_of_ref": "indicator--ed761812-ec2a-4093-b2fc-1631b55e5f5f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b3855b-442b-4d72-bfea-98697701905e", "sighting_of_ref": "indicator--2fa75107-29ec-47b0-8526-a7c3e4c4ae69", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba12f973-6fad-4ce5-a648-4d89a1cf413a", "sighting_of_ref": "indicator--1ba1bbf5-8b6b-431d-8fde-6714c8db4e00", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f795dbac-5aa7-4e7b-b40a-4000dbcefbb8", "sighting_of_ref": "indicator--23180d05-de9f-49b2-9755-096df3c1a714", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82657c5a-a2ef-4eaf-8382-4ef28f4e301b", "sighting_of_ref": "indicator--fcb6b1e5-ebc5-4981-8c01-672495334edf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e6bdad-53ad-4f3d-a892-be5b7edd8324", "sighting_of_ref": "indicator--30e8ff31-893a-4bef-b032-de2437663173", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdab7d4e-ab4f-4ef9-ab75-73228d7a134c", "sighting_of_ref": "indicator--464154fd-3695-4bc5-912a-d8f039501fbe", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab34797-b52d-40fa-9805-11f057d3d71f", "sighting_of_ref": "indicator--e26b8b9f-3643-47f0-830a-6954ac5a50f6", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0393fe6-addf-45c6-9861-5ac217ea5728", "sighting_of_ref": "indicator--e26b8b9f-3643-47f0-830a-6954ac5a50f6", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78dcd9a1-52ac-4aa9-9c61-8482af6fd034", "sighting_of_ref": "indicator--69205609-f7ef-4481-9cb0-923cee4c8c24", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7882d1ec-4859-4d7b-88ab-8f2e76e86c3c", "sighting_of_ref": "indicator--769ff241-f1fb-4d9f-a25a-7a541e694747", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e0a66b7-d43d-4a5e-84cd-b0368126f0ec", "sighting_of_ref": "indicator--92e9f3e4-e86e-431d-9891-f2351b49232f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a896d782-ee87-4222-877b-40aa9ec51af0", "sighting_of_ref": "indicator--1464bb02-1752-4e32-a660-58ab720bd516", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8074e26-bd81-416e-b56e-510c8902ad59", "sighting_of_ref": "indicator--6f3ab4c3-1dce-4d60-b277-61cb413859b2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de31fdbd-ed0c-4e94-85df-9c27ffef640e", "sighting_of_ref": "indicator--faf45e49-7729-492d-8e40-6791601c5a80", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a15bdc0-c808-4978-aeee-23d4a32e8be2", "sighting_of_ref": "indicator--07c9f429-14ea-4d94-924d-659fc7f1aa0a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d96930d-c919-4759-a428-9564233af6db", "sighting_of_ref": "indicator--f4d31b58-4f1c-4dde-8bc5-843e144e126b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45fae50c-8b00-432d-9823-566f0446254f", "sighting_of_ref": "indicator--9b8b6aa4-aee6-4c6f-946c-0d14202c7d14", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c49741-9827-420f-b19c-31484db3fa75", "sighting_of_ref": "indicator--5c88a36d-1462-4cde-83fd-9a5dcd90b4e6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fcb3900-c5cd-4c10-8640-ef8f81a91d47", "sighting_of_ref": "indicator--e4a0c21e-a37c-4857-9bcc-1ac55b86ca71", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9da743-cbec-4ae1-add7-e5769023f680", "sighting_of_ref": "indicator--d427b4f0-79f8-4c63-8489-bafb184c8d47", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c76eb2-8c6f-42a4-add9-357c3082680b", "sighting_of_ref": "indicator--4e0fcfd3-bc45-4f5c-a661-707eabee99cc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ddef012-a188-4c85-9fe2-a84117a44fe6", "sighting_of_ref": "indicator--bcf2508f-3daf-4fff-81d5-79e895764e17", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e627bd-f176-453d-be44-d17aa5305feb", "sighting_of_ref": "indicator--e8672ed0-85b9-461a-b242-6015561f63bb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be998414-46cb-47c2-9dda-06e5274644f7", "sighting_of_ref": "indicator--3b305d04-45c8-4320-8b1c-9145ececc139", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--145b73a3-81ba-476c-b8e6-7ea5013e5200", "sighting_of_ref": "indicator--2293a669-17a6-4cd4-b7e5-ebd796146792", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b64b7d-f8fe-4a35-b522-e4a293d9adb4", "sighting_of_ref": "indicator--65869eda-1e8d-4665-913e-9da7aa0bde6c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b816c0-4e33-454f-8ecb-97ab1ea9eb8f", "sighting_of_ref": "indicator--ae3c1e58-02a5-488d-8261-6093c7c9dc79", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0d209d-3fab-4644-abb0-fd86b2493266", "sighting_of_ref": "indicator--c3997f43-dc42-4e4f-85e5-40b350c81a5f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1415de1-e7ac-4dac-b715-d82fd3361f72", "sighting_of_ref": "indicator--0ca98f25-ba5c-4765-a1f8-a2d91230624a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b243473b-1951-4808-aa37-cac00dec3e00", "sighting_of_ref": "indicator--c6b277c0-a1e8-4067-8025-b2b805d6258f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b50f3fe4-3f08-48ea-b7e8-3c630e326da9", "sighting_of_ref": "indicator--d90bc3d3-b0af-48e7-a7f8-72b6e79a4c94", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--964c2c8b-dea5-43ba-b8b0-d184c230f040", "sighting_of_ref": "indicator--3e0bcbf5-dcfb-4f17-91e1-92bbd96ffbda", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9a038a-1023-4fea-b005-97dd6e337d05", "sighting_of_ref": "indicator--87c3dbed-a138-4e22-a702-fdc1d4886f37", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ca2947-cf9b-495e-aa99-a5961987c719", "sighting_of_ref": "indicator--43670dd8-4593-4dca-9024-2d3d45cb8dae", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13955dc0-c633-4caf-b71a-4b82035cbbb3", "sighting_of_ref": "indicator--853a417c-84f9-4c92-bcdc-19310fd76065", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00bac6c8-0ec3-48f0-899d-849135241617", "sighting_of_ref": "indicator--8fedf5c7-91d3-442f-9ebe-4df8f76429ad", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc906ec6-f8cf-4d26-87d0-2a78bf77e78a", "sighting_of_ref": "indicator--e255277d-9785-401d-b915-1649d75adfb3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f0453c-8f25-4b38-aa1e-c82eadb05186", "sighting_of_ref": "indicator--594cc809-edfd-48c6-9475-94ce47b30d4e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b0db7c-8b32-4c48-b4f9-ba97d2076e26", "sighting_of_ref": "indicator--66224b86-daae-405a-ae85-76bf8d51befc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efec9c7e-198d-45dd-b682-12a4a695247b", "sighting_of_ref": "indicator--a5c1ae2e-10b0-4c2a-aace-e44f6a0ead87", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e7296a-364b-4e5a-8414-1b6757b09d31", "sighting_of_ref": "indicator--a44271bb-2500-4372-a930-8548c841437b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--220f6869-9aef-4ffc-8025-ca4bf26c7485", "sighting_of_ref": "indicator--da5067f3-954a-4805-a97e-ca17ceffdedc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2411acdb-5442-4433-8156-9cd0b0565605", "sighting_of_ref": "indicator--4697e0e6-5edc-49ef-9c58-536d9745c1d1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a450782-a881-4b02-8895-fa331c19a79e", "sighting_of_ref": "indicator--26fba9be-bee5-4006-a6d4-fd8fffc42a15", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930f9720-d0e8-4483-81d9-c02d2c581a0b", "sighting_of_ref": "indicator--debad532-0972-42b9-a7b6-0bba1f00963b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f1c0530-e5f2-4328-b8a5-8473917e28a5", "sighting_of_ref": "indicator--654766de-341a-45b6-b817-df213908b496", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df8b326-0948-42f0-afe8-efd44a76554d", "sighting_of_ref": "indicator--2571718d-0017-42a4-9ffe-d34e7a96595a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92374e8-b49f-4a1d-94ea-87189284274a", "sighting_of_ref": "indicator--e7a475d3-12bb-41bb-84f1-3ab845e30e55", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862fe4f7-e687-4145-8583-edcdb29e75db", "sighting_of_ref": "indicator--eadaca46-6152-4cfc-beba-b435b9060711", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e9bbe5d-9d41-4b3b-8c98-0bafe48532c4", "sighting_of_ref": "indicator--1cb2c4a2-9d9d-4cb0-aea8-b651db691b96", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80396d97-da16-49db-b590-178331dc2eb5", "sighting_of_ref": "indicator--48c856bf-6968-4f70-af85-1459be999ee7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf1ddca-d76a-4a28-addd-16dc485b5531", "sighting_of_ref": "indicator--33990e40-3d90-4451-82cf-16fb1dc01284", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9279f25-e44a-48ef-8067-f4c65102514d", "sighting_of_ref": "indicator--b7ec7fd6-1e42-4f96-badb-2c3df19ee3aa", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04bb179c-3e84-49d1-959d-67e3031a5ef6", "sighting_of_ref": "indicator--f41bf19f-5c2f-4335-8720-6338729ef759", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05a0eca-69d1-43d3-a49a-6fd951abef63", "sighting_of_ref": "indicator--40be1475-3698-4c59-b821-e70dcec904ea", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1426ec-a981-49a4-81eb-3e55de8c1661", "sighting_of_ref": "indicator--c9bee0ec-9d35-4936-96f4-fbb5e1135a2c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d2c20a-f136-4fe0-8fc6-e2ff4f4ee7e2", "sighting_of_ref": "indicator--17dcf868-f289-45a4-94aa-a14708edf5e7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--143ed8a4-e7dd-42f0-a7b9-e03bdc7d9a35", "sighting_of_ref": "indicator--e846036e-0fed-4dc2-a1ed-9ef0116fa59a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcabb72e-7b02-48de-b801-6327a5ee52c3", "sighting_of_ref": "indicator--0852be03-271e-47c4-b93f-cc19cc0bac25", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a139168f-36a0-47ad-b062-a4961d27021d", "sighting_of_ref": "indicator--f71f3067-0d00-4f65-bc26-2a6fbbca003b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551f090a-1b55-43f2-85d7-e7b4e27ea607", "sighting_of_ref": "indicator--8a70c4dc-0cbc-4c11-a5f0-a3f614ac6361", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3d9b75-1cc1-436e-a297-31fb2f9c9a7d", "sighting_of_ref": "indicator--ee5e723b-2298-4348-94b1-600da1c1dd20", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a3b696-96fb-496a-8594-40f722ff608c", "sighting_of_ref": "indicator--bf12ab46-e0db-415c-bb4d-3f7608693a7a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb98e56-19be-4958-9187-d7b5ec8816e5", "sighting_of_ref": "indicator--b097c260-91a2-479f-9ee3-9b57f98a37bc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--596d088d-85bb-4806-ae8b-cec86ae77c1b", "sighting_of_ref": "indicator--eadd6329-70a6-491d-b491-07090d748088", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c8678f9-7c7f-4c8a-b7b3-4698f422eeb2", "sighting_of_ref": "indicator--5d0486ec-23c1-4dea-95e7-72aab916c31d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f92810-0541-43e1-85a8-d3cf4274438e", "sighting_of_ref": "indicator--a75989ee-47f2-452f-96a8-7cda537ff924", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cafd3e5-31af-4bf6-9c4d-0e993a5a310a", "sighting_of_ref": "indicator--d42d50b6-b4ed-4f7b-9b04-420b53889ed3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fb7d28-58d4-4bc9-af55-d23a5372d472", "sighting_of_ref": "indicator--0c88350f-111e-48ea-9280-e106feb564bf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7577f5e1-95da-491f-8fcf-c68a4a51b2d0", "sighting_of_ref": "indicator--cdb1111d-f03a-4b14-9a9f-ea50728a03f3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86050259-f330-4bd9-876e-498c2da2e365", "sighting_of_ref": "indicator--74610633-004e-4890-9601-a713fcdb8050", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53eb1e6d-953e-45f4-bf05-a11515310a9a", "sighting_of_ref": "indicator--1905b8d7-3040-41be-8c1d-d6e55fe5b2a6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ff5590-ba95-4edb-a75b-53656daa0b3c", "sighting_of_ref": "indicator--46443093-b9d7-4f85-b568-9df70f470c95", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336c8270-ecc4-452b-9b66-5a6124dd64f5", "sighting_of_ref": "indicator--00c65ac9-8bfe-419b-978f-100245556daa", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb6ed0c-91d5-4674-abb1-4ab6a4a3a75a", "sighting_of_ref": "indicator--0f762e28-b601-4d6d-b594-47c083df0739", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668770b0-dd1a-498e-9316-6987a3f034c0", "sighting_of_ref": "indicator--68902bcf-6392-45c6-9514-08d3f74eaa98", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d241eb0-95df-4728-b0db-da6a21e540a5", "sighting_of_ref": "indicator--84038dd6-ec9f-4cf3-99b0-11d4c8499ea4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f83ef17-6258-44e2-90bd-09dd184abd8e", "sighting_of_ref": "indicator--57adcc78-6aab-442c-a204-df43ef288a72", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4dd4cb-33eb-43ff-a2d8-178fd0fc1f38", "sighting_of_ref": "indicator--0485ed06-fa2e-44e0-9330-92a39a48d7ed", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad16cd84-f192-4462-892e-29cee1516d76", "sighting_of_ref": "indicator--219fb267-e841-4d66-8233-39b32c351022", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b50f5b5-00ec-405c-9a73-71e1d4fac87e", "sighting_of_ref": "indicator--8fbe61e1-ddfe-4700-bbd4-b3b0c4128285", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8068a1c-4425-49f6-bd35-e200f75e43e9", "sighting_of_ref": "indicator--d226a999-223e-4f43-8e0d-809f2d057eb2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3577bc1-db20-49e5-bf10-6ea9079009b8", "sighting_of_ref": "indicator--bf834a77-2cc6-44ab-8f2a-36a0185e1093", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938b8b72-1d95-4e69-87f1-8300a2433e1e", "sighting_of_ref": "indicator--8b83aed6-d293-4e0a-aa63-0f3a115d1898", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd14cd0-3a4e-4a0e-83fd-3ee562d31d28", "sighting_of_ref": "indicator--f7ab93aa-3f31-4b91-b46f-b35b78328000", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30b92e0-b6fd-40d8-996f-588eae1b59ab", "sighting_of_ref": "indicator--45229890-257f-4b74-8e47-9e5dc5002baf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b86d7726-d8ca-457b-95cf-9b4061970407", "sighting_of_ref": "indicator--c166ebf9-f2a0-478e-a8a3-260a9d464c09", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70fb4b0-d368-4ed5-a96d-a49675be5a8a", "sighting_of_ref": "indicator--f6fbeb03-ceb6-4350-9a0e-e65aaf32dcf4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff5ac4e-8665-403e-9797-2134a74f484e", "sighting_of_ref": "indicator--ccfec88e-be17-46a1-a8ce-49f1489069e8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f872c15-4fbf-4cd3-8cb6-1cc9af28fc24", "sighting_of_ref": "indicator--1884d5a4-5f19-440b-a5fe-406facb3e439", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2331924-810c-4bad-a0b6-c5fc01b732e5", "sighting_of_ref": "indicator--a48aa360-bccf-48bd-bb00-82244b8b051f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d76152-5439-4af0-a4b6-484565218c1a", "sighting_of_ref": "indicator--0c4921e8-ace8-48a0-bce1-62f636b26a11", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45b70445-4ea8-4e50-9ee3-ffbdaa9a1676", "sighting_of_ref": "indicator--da04e97c-3a6a-4afd-8895-ae8c3211351d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2403aec3-cb0d-4f32-b438-8e293bfd4034", "sighting_of_ref": "indicator--5f7110b3-9273-47c7-b793-0d821c30bac9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db77065c-854f-4f4e-83ae-8ea4b7ce00e1", "sighting_of_ref": "indicator--352c6e11-8115-46fb-9f03-259ab5ac6cec", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba09d70-0f33-4067-878f-a83d6902c260", "sighting_of_ref": "indicator--2d1391fd-b62d-4b34-ac32-1daf6f098763", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb095e6c-ba9b-4748-81fa-13b6cb72e181", "sighting_of_ref": "indicator--a8ff815f-42a3-4b13-a3b8-53d3549d6c56", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a12a9f52-947d-4602-bb45-1c8def6f0722", "sighting_of_ref": "indicator--254dc893-5db9-43df-9608-dd21320b93c8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ea76f5-32f3-4a23-82ed-5f6754353a14", "sighting_of_ref": "indicator--69cc5a4b-dc42-4c8f-b4de-0f65a3068186", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c85e97b2-2430-45fa-9074-e4f56d5f94ec", "sighting_of_ref": "indicator--a7a615f0-dc05-4a42-ba61-9d7536bb2a7a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09f55bc-3292-4bf4-b63c-b155341f176c", "sighting_of_ref": "indicator--7015ef6c-f9a3-4375-8171-b68c3f06dd26", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--454e61cb-bf42-4890-b663-b652fc94ca04", "sighting_of_ref": "indicator--bd62c7ca-b203-464b-8b47-c6962acc0562", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52b891d-485e-49ac-a284-68b2b6724645", "sighting_of_ref": "indicator--45b3a02e-a352-4905-b6f4-58fd17910935", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25342f0-1800-40af-8487-3ec5420bf794", "sighting_of_ref": "indicator--6991f514-9b8a-4a77-a730-0379470dee9e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9493f5b-b8c8-4c0f-ad9c-78d0e0d85f6b", "sighting_of_ref": "indicator--407787b4-7f8c-40f7-a1a0-a47b8ee791b0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535961c3-3303-4833-8f52-86a0edc2a480", "sighting_of_ref": "indicator--fc5b380e-943e-4041-a4ee-794f87c6adc1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc32256-63c0-425d-b1d4-6504e271d7ea", "sighting_of_ref": "indicator--261063e4-ce19-4ebd-9206-cf7508586bf8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97388a4-5de9-4399-8050-889074342b3a", "sighting_of_ref": "indicator--657d846a-fe15-4062-8ab3-c6d6a7e15d27", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76648392-fdaa-439d-a086-7d3926174777", "sighting_of_ref": "indicator--8391b6ab-1681-4dfd-a693-136782e4d7e4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10eed23f-6995-4d3f-aee2-294a29163f44", "sighting_of_ref": "indicator--6c7acb7f-22ec-49d0-8338-b62c8c8481ad", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c0bfd8-afeb-4849-a646-e104bd3fe69a", "sighting_of_ref": "indicator--0882186b-c97c-4539-9ba3-639955b8697e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4328de2-91d1-48e5-940f-068278261277", "sighting_of_ref": "indicator--275edaf3-45ef-4484-abf7-e7a41c7f0a0f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aebc12d3-b26f-42bd-9ba3-e355e7561f40", "sighting_of_ref": "indicator--4dd1e71d-ad40-4841-9905-6a0d5c1de71b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d10d58-f25e-425b-b460-16bd3f10e326", "sighting_of_ref": "indicator--3d6f8d44-7cb2-4e90-a35c-5c24de09bb6a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25ca3102-2a58-4b04-a217-771461c41a12", "sighting_of_ref": "indicator--7c64a39e-99be-4bf5-b152-72bbf9753883", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80373bde-8c87-4af3-8d02-69ab836bd9e8", "sighting_of_ref": "indicator--c6e83228-9538-4f14-ab4f-7158c37c81fa", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d059cb70-82b9-412a-85ab-dc6e27fa3fe8", "sighting_of_ref": "indicator--977db046-287c-44f9-8732-96c2475ae903", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8357b609-bcec-41c9-86d4-2dc48cdfb495", "sighting_of_ref": "indicator--c505283f-5331-4bfb-8252-9d8e28ebcd99", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db17a319-cc9e-4b35-942d-6763cab6f200", "sighting_of_ref": "indicator--c7091397-9c25-42a0-b3bd-5d048c5e6c40", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a2a313f-0341-4b19-a254-0434a997655c", "sighting_of_ref": "indicator--d3f631b7-30cf-4315-83d8-bc11e74934b6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1405792-23dc-4a0f-a838-cb7d5d388a22", "sighting_of_ref": "indicator--1bafe8ff-8e5d-4c67-9096-571ef5427492", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d128d23-3499-4d19-b302-b279db77c67c", "sighting_of_ref": "indicator--f2d3389f-61fa-4387-ac3f-c3686992ea17", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2860e001-6b5b-42b1-8f73-313b533ccedb", "sighting_of_ref": "indicator--fe56da38-cc82-4a56-845a-0f585ebd7763", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5f985e-9544-4a96-b5f4-a6c73cf60a37", "sighting_of_ref": "indicator--47962720-1c4d-4673-8325-7f37410aa567", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1578a05-c073-46ce-91f9-05ffd7b55b92", "sighting_of_ref": "indicator--da1773b5-fc0b-4ebc-bb0b-24f4b31cc2c0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d5677bf-d939-4e04-9716-dd0ffe1b7ea0", "sighting_of_ref": "indicator--5b3c0b90-1593-4b1f-bd22-7ac1824ce011", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9417741-f528-4a97-9276-4a6eec0d64df", "sighting_of_ref": "indicator--a3683fd4-00ca-46de-8d37-8fccf318bca0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c5b2be1-2142-4764-8930-e672485aab8d", "sighting_of_ref": "indicator--cb23e90a-07bb-4a67-85c8-a823e0f49926", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c43e6afe-971a-4e18-851e-1c4732005961", "sighting_of_ref": "indicator--808df7bd-1ac8-4ab8-96b6-b401ecf52520", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8821c6-9bfc-42f1-b07c-1babcec1c23b", "sighting_of_ref": "indicator--9ab49595-2429-4e31-abb3-b071d7a30d58", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a840cb5b-de9e-485b-a95c-bd885148b851", "sighting_of_ref": "indicator--18841ed8-cf0c-4e76-8625-aea02b7157f4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f94b0470-fad7-49f0-9a94-765d62c4a620", "sighting_of_ref": "indicator--a0df26bd-1d47-4ab1-ae84-272414871740", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c07de4d-e970-42e2-b97f-df74c98732e3", "sighting_of_ref": "indicator--93212016-6389-4b74-9b71-6c081d3a0666", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3458cd9a-b221-499f-b9d4-58f9c78693e7", "sighting_of_ref": "indicator--6a5605fb-0323-43fa-9a31-fa103d618b98", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f372afac-f2f7-4f06-a402-919ede71e0c5", "sighting_of_ref": "indicator--3aea0724-03c4-4a2a-bcb3-9c979bc1bded", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97dc3e96-81b8-4c10-a67d-007c156d62ef", "sighting_of_ref": "indicator--d3174e8b-349c-4cfd-9ded-73ec0c22f661", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ed2a62-1337-4eea-9d6e-f750668ec953", "sighting_of_ref": "indicator--94bdcf33-eaa4-450e-a5eb-0789e02afdff", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e9fc21-d842-4c04-aa96-f345d17f529f", "sighting_of_ref": "indicator--70b1f6f4-6397-4c84-bcdf-7bee2a1634b0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7e03c6-e4a3-42d7-9d1f-060d6cb732a8", "sighting_of_ref": "indicator--9b394f67-2e2c-4387-bd3f-8b6f64ccc4df", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef328bd1-5793-4fd8-bd2c-ad0e1ff2dae0", "sighting_of_ref": "indicator--83e3e6f3-30c4-4e01-a0ed-bf8a99adc843", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d06002-5b95-4dbe-96a6-1d73ea00320a", "sighting_of_ref": "indicator--0d3d30ec-2e94-483e-bff9-50c9c6ded268", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a1cfdd1-b31b-41bd-9b11-dc9745ad2bba", "sighting_of_ref": "indicator--b1e06e66-883f-42a9-a02e-96cd32aa7645", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b9de3d-6ac8-4a0a-9cf2-2f00838b9dde", "sighting_of_ref": "indicator--76300d9f-2ff7-4fa5-b5dd-23291a2924c4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf4dd80-d38c-45a8-8e0d-6f5005c6d80d", "sighting_of_ref": "indicator--e8348a0e-cab5-40c9-93cc-97ce1e0503b9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66099f6d-82aa-4b51-8810-889a77d5b845", "sighting_of_ref": "indicator--365c1261-e0f5-46f6-a126-e33f1b2ff149", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6add3578-cf72-45bc-9b71-c032dc7d0f6d", "sighting_of_ref": "indicator--9bd8b763-4d25-4714-8a17-8d73de100b73", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37dcb921-59bc-41df-877a-23192408f9b6", "sighting_of_ref": "indicator--7c19a04a-6921-436a-aeb6-96df77c9ae59", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--606e1534-5fc5-4a4f-86b3-33e52b2e5627", "sighting_of_ref": "indicator--c8ad32de-51c8-4b00-943c-a90de4d3b634", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e0ef99-0ff4-468e-9d0d-f860f2de8026", "sighting_of_ref": "indicator--679046c0-786f-49d6-b30d-1c5f53b372d9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded97d0f-eb82-47c7-bc70-97aa6cf57cdd", "sighting_of_ref": "indicator--7b4a9de2-0c8b-43a3-87f0-c4ff613e424f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73b6384-af7b-4000-a165-1b1838d99029", "sighting_of_ref": "indicator--fdafda4a-501f-4d5d-97f1-9e2c034a35c4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b925f744-7bbe-49f3-893e-c497cf25a97e", "sighting_of_ref": "indicator--fa3d15ec-0d03-4edd-9475-4b6cb4c4dad8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58fa59ff-9a95-4fd4-b50c-0b579f965180", "sighting_of_ref": "indicator--1f202722-276c-48a1-917f-9ba06718862b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a73a090d-51b8-4b30-ad10-f1b26dc1d656", "sighting_of_ref": "indicator--6eef7b36-73ff-4cc2-a2a6-a9ab8a64711c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86152a1b-6b96-4196-9e3e-fbfbe7444a78", "sighting_of_ref": "indicator--f4bdbb66-e063-4de0-bf49-b9c3485963e5", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222de46e-4c29-4372-8ebd-abbfd53db97d", "sighting_of_ref": "indicator--fdc5b001-82a0-4116-8d23-b091957168a7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b83a294a-0f2d-4ca7-8f94-f787ec31bd05", "sighting_of_ref": "indicator--30342795-67a7-4d21-b1e9-1b2269e7c67c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f83eeebd-206d-4e42-af11-ab11d6972a3f", "sighting_of_ref": "indicator--bfdf5aa7-4a1a-4e08-b94a-ceb68b5f3cbb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a589470-bbf0-4f45-b65c-90b0cba58c83", "sighting_of_ref": "indicator--b1100800-7c0b-470e-ad37-12cc182c33db", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f380f018-3992-4302-ad29-6fd0d7dc6d96", "sighting_of_ref": "indicator--096de0de-83de-4067-b652-595c31b2216c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--270a4cd0-f65c-46c3-b293-27a90fe954c1", "sighting_of_ref": "indicator--69fc326f-e83f-4839-9663-b660437e843e", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c135a628-a4df-4e5d-aad3-1a19b76cf043", "sighting_of_ref": "indicator--c22dc258-cf7f-4ad3-a85c-6615550437d7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aaeb480-5fce-4a14-b54f-b7918041c66e", "sighting_of_ref": "indicator--4e3956df-72ed-459a-9360-30aeb8a4669d", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5feb1586-8d80-4713-abdf-8c4795ff1a8a", "sighting_of_ref": "indicator--4e3956df-72ed-459a-9360-30aeb8a4669d", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394e51c8-142c-4d52-aa40-c5ebb9771b78", "sighting_of_ref": "indicator--967876c8-ace6-4e44-83df-59df17ced962", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c0b5c1-a126-4990-908c-6f23280452ac", "sighting_of_ref": "indicator--d91607dc-fc82-48fc-8693-3c7134d49f2b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee4feb6-503a-4b64-a6f2-cec8810ec2fe", "sighting_of_ref": "indicator--6de4eb3b-d8e8-4ffb-86b0-f08684609354", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cdbbcd8-8f65-440d-9eed-599a3d279a68", "sighting_of_ref": "indicator--75532147-1096-4c94-a8df-6d5ab83bdf7f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f370cf9b-79ee-4ced-8696-d0c56278dd05", "sighting_of_ref": "indicator--34c843ee-2ff6-4071-9ac8-bc5d33458c41", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e29fc9-d963-451e-a50a-dd576f09aabe", "sighting_of_ref": "indicator--6f42553d-ddae-4d1c-bef2-b6b2240c7790", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40298df9-e17f-4a6c-8902-d70ae5f7818f", "sighting_of_ref": "indicator--2329f5a5-891c-4dab-abb0-560f0149136a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0449266-945e-4f13-b740-ca1b46277360", "sighting_of_ref": "indicator--9c80d4db-4f57-44f1-a52d-7987930f090b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b93689-d937-44de-bfeb-bef2579ed90f", "sighting_of_ref": "indicator--e9be430d-8854-4a62-bbd3-8ebffb3e9549", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a500183-e44c-487a-8571-5ea4194c7449", "sighting_of_ref": "indicator--93337dcc-5943-4c4d-b39b-8173c34b5c16", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f72ea209-d8e4-48d2-8601-912b47c8f6bf", "sighting_of_ref": "indicator--b0fbcb92-571b-40c0-9c35-b80dacd6db1c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d70486a9-6ef8-4c09-82a7-0b1e5de5f1dd", "sighting_of_ref": "indicator--72eee1ad-edf5-4515-a771-cbf2bc0d341b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66043e6b-2f35-4b9c-b0cb-968b17de0cf3", "sighting_of_ref": "indicator--190b4a38-0736-4805-9319-a91ec241ecc5", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b38977f-c9e0-4b2b-9fb1-160b1c80ecbe", "sighting_of_ref": "indicator--190b4a38-0736-4805-9319-a91ec241ecc5", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213e2af0-d307-46f1-b367-45d78caf5229", "sighting_of_ref": "indicator--d8d0b467-ba68-4503-a127-5837ce382f7d", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e992eb9-5ba7-439b-a161-cfb0b28cfdb9", "sighting_of_ref": "indicator--a945a1ac-cd6b-4195-a3fb-bc9951aad950", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f0acda7-258e-4445-ad3e-253975dcfa06", "sighting_of_ref": "indicator--5b745cc0-0f43-4a26-bc78-44c78dad1208", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14458176-77d1-44dd-b124-0067cbe9f313", "sighting_of_ref": "indicator--2d10c006-aef1-48a2-9628-95de554bc15d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a02195e-2726-48d7-8650-56f10d8aa6de", "sighting_of_ref": "indicator--e4e4abad-3be7-47e7-8c99-0437c4f1f749", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--120f93db-d93a-4a11-aa8b-a6a01ad865d9", "sighting_of_ref": "indicator--00d790a7-ab1e-4226-a6d9-3e2764ec0b5e", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad277a18-28c0-4e98-bc09-c3394ca9e4c4", "sighting_of_ref": "indicator--cb4b40e4-f96b-474a-a606-729322aba911", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a9fee4-e442-4b1a-8efd-00eb07cb1bd3", "sighting_of_ref": "indicator--dc3bdf76-9458-417d-b7f4-03c32c8628d6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a511d9c-21dc-450b-9344-e816aa0037b8", "sighting_of_ref": "indicator--7d240867-ed75-452f-9645-4318df06a170", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb03a45-0671-4950-9c89-f85f3c28ac59", "sighting_of_ref": "indicator--969395bb-edbe-485f-8929-6c875b89125a", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd483c0-d27c-4dc7-a8f1-508f5c231a43", "sighting_of_ref": "indicator--969395bb-edbe-485f-8929-6c875b89125a", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2f45f4-5e53-4e5d-aa3b-7220a42e4d8f", "sighting_of_ref": "indicator--aeea7910-8cd0-42aa-872c-28f4af02ee47", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb075c8-7e06-4bbf-a143-78e30de09eea", "sighting_of_ref": "indicator--0c5d9c62-1b1e-429d-ba6d-fd340e17e831", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e8788c-cbd1-4a84-b998-fab1464a070e", "sighting_of_ref": "indicator--2613907b-6ef3-47ab-ab02-5b0d679b8865", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de160f1-cef8-4732-8fbf-a10752eef4de", "sighting_of_ref": "indicator--c4942afa-7130-46c0-8215-644c1bcfc89e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84de46c1-f861-47ed-a600-ed88ffb40bc7", "sighting_of_ref": "indicator--4d77668c-a7a0-4247-9ea7-09dab6aab044", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba18097d-51c5-4021-8b72-ee3701444694", "sighting_of_ref": "indicator--762537cd-36c0-4c25-b044-00d507ff9636", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2d2f70-627c-47e7-905e-c98c35b96177", "sighting_of_ref": "indicator--a7504559-c0f1-47c0-9dda-1017a7c3738c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb8d5a38-2bfe-409b-ab67-2ac7bd5ce25c", "sighting_of_ref": "indicator--a422686d-fb07-4fa9-ac38-2308ef246234", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3b1ac9-509b-476a-a18d-7d9713289b89", "sighting_of_ref": "indicator--a22653e9-2216-4c71-964a-93a1d93b4fc6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03511e2f-2ea6-4cbd-8ecb-b8f27a3487ea", "sighting_of_ref": "indicator--ea0d23ff-faf3-45b8-b270-4d733f40b3fa", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d62eb0a7-6372-4fce-ba25-9d6d185e5afc", "sighting_of_ref": "indicator--840660eb-f25f-4363-99a6-6751c4cacb40", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51965d9-a629-4488-9585-687aa43f649b", "sighting_of_ref": "indicator--54715037-8e7e-4c4b-a41c-907cc7550f26", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d62e52-11fe-48f9-bc38-5ee5232e2702", "sighting_of_ref": "indicator--aeab5b99-e9ca-47c3-aed6-80fd364ffad2", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f4329a-2e8d-4b86-81c5-f4cd52e34b3e", "sighting_of_ref": "indicator--f7d6568c-325c-4d89-98f1-7c221a49f92e", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a95356e-3bdb-41cd-ad55-26c0964a61c1", "sighting_of_ref": "indicator--f7d6568c-325c-4d89-98f1-7c221a49f92e", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e67c94e7-5a12-40ab-8e4b-1a3ba0414534", "sighting_of_ref": "indicator--fd835a88-fe45-40b2-a76f-9199f1f1062f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde2ad70-13e2-4531-b49f-67f34b27a853", "sighting_of_ref": "indicator--8db10fb1-8abb-4562-bd35-198c85dd73ec", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e562c5-002d-4a01-a7db-2a9dcb647c75", "sighting_of_ref": "indicator--66d1a657-7d10-4380-8b01-8d022cec26a4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745d76d4-6c09-48bb-8ac1-a8fb76a57673", "sighting_of_ref": "indicator--a45187a3-e546-4ca4-9884-c30f73fe09bc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0465d470-e8d6-43fe-acc2-c15730ec98ef", "sighting_of_ref": "indicator--256e5e37-233e-433b-aad1-fc7cee1137bb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31eb0f8-d1e3-4937-a278-f69b15591809", "sighting_of_ref": "indicator--82d4e827-d07a-4c7d-8ab6-a65b6f06a8f0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a100785c-d5d4-400a-9154-18d7b781924d", "sighting_of_ref": "indicator--356fd44c-5cbf-458d-a572-76d66924b011", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca838d8c-2e3d-48b4-89c9-387c2c75590d", "sighting_of_ref": "indicator--4807af03-d885-4c5d-821c-03ef156786f2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fe2cca-d3bb-4d66-9642-69843d4b86fa", "sighting_of_ref": "indicator--8551b7d1-5c09-4d5b-85b9-426c16825df2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ad6e29-8e77-402a-956e-7c4497adf03e", "sighting_of_ref": "indicator--8426f4a9-2cd7-48a3-8a3c-0050aac7e51f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef55d68f-8d8c-49f3-be74-a2be9c228f55", "sighting_of_ref": "indicator--7f7debb6-0f10-4233-9bb8-cd3859473c98", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--006d9b43-bdba-45ff-b4b9-36395ac29f9d", "sighting_of_ref": "indicator--607b2789-5013-419c-83f3-a41e751a7ee6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71974e7d-2749-4354-9c75-160ac1b7f24c", "sighting_of_ref": "indicator--5a235787-03c8-4432-a44f-b2ddae4c8aa7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe26f4c-7fec-4c69-8585-bc0b0d3222c9", "sighting_of_ref": "indicator--04d0116e-c508-4486-bad5-ebbc4224e3af", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--071376e6-7b80-480e-b7a8-63ca2d73132b", "sighting_of_ref": "indicator--7a896805-a2ab-4d8b-9dbd-3e53096bdb1e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--674d7f50-1e31-441e-9b5b-ddbf8aa11ee5", "sighting_of_ref": "indicator--6c5476c0-494f-43d8-9d09-26f6ec640a70", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b6d7f5-2a54-4c05-b529-79830cb4c862", "sighting_of_ref": "indicator--ab09ca56-6414-43a6-9a76-3b29a135be12", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32af8b33-7afa-4ee9-bbbf-799488f156e9", "sighting_of_ref": "indicator--ba1a1881-9861-4198-8e3b-f30e9eedbc4d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--754f48e7-1e9e-4d8d-8281-4219eed09784", "sighting_of_ref": "indicator--33188548-34ef-448b-bd4a-f7ee9fd24e77", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa446bb-8335-4b5b-8580-a5eb9a031648", "sighting_of_ref": "indicator--da51e59a-1b8a-458e-b21a-4938afe33037", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--392c75e4-fb1c-44d6-bb70-09117ba11f6a", "sighting_of_ref": "indicator--d9b68a3e-724c-45cc-a663-04e6684123f0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc6047e3-67de-4b57-8c59-c25a746355bf", "sighting_of_ref": "indicator--6655b220-4c73-4d43-954c-59ee20c48696", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d752ce3-7812-475d-accd-f3882c65ee13", "sighting_of_ref": "indicator--f714e318-5ffa-4bd5-b84e-cbf84b7a69bb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a413bb64-fea5-4042-b113-6995fff40db2", "sighting_of_ref": "indicator--8eb4856a-8411-412b-a3f7-69bb95156892", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a780df56-4250-41d7-9443-825ce066ea31", "sighting_of_ref": "indicator--2aee2ace-f7ef-4d50-9a8d-0f8abc15d56b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--043480ff-c1cc-4934-a5a4-b28ce94162e5", "sighting_of_ref": "indicator--8761a651-ba84-42bd-8670-d4417b048ef7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b001970-0400-4003-ad18-d64ba9d0ce1a", "sighting_of_ref": "indicator--8f21d168-28b2-4507-a427-8447b5c87661", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e574d360-01b8-402a-ba31-b7f5da1730e2", "sighting_of_ref": "indicator--6698d59e-83f0-4e85-843f-c6070afa9cc0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea53ead-f237-46f0-ac79-ee8293723bc9", "sighting_of_ref": "indicator--c2119fdb-50bd-4dfd-bdae-633c1b73aa75", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef44cdba-6c17-4fac-8d93-56c3dfd93e9c", "sighting_of_ref": "indicator--be714ee3-9e3d-45c2-b707-ecaa982c3395", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b17e11-b8cf-4095-84b9-769fd40f395a", "sighting_of_ref": "indicator--72cc004b-452e-47cd-884a-1397f046384f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef8ccfb-6ac3-4107-8ed6-a84d6db27f1c", "sighting_of_ref": "indicator--ade14119-6138-42f2-b49a-b74b80a95326", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1e8a42-1e81-4ab0-a5d5-c6b33c705a6e", "sighting_of_ref": "indicator--5802efbc-6a5c-4ea3-9fb7-ccfb20c372e7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dccab1ee-a6d0-4290-8477-59cc55e75cf2", "sighting_of_ref": "indicator--3bca85ce-04f3-4d06-920b-d12af9fb099e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d71f08d-734f-4c25-be6d-a7415ad4ffad", "sighting_of_ref": "indicator--ad65d352-70af-468e-9392-2b53cf569f14", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3010e82-2a48-423a-9510-610126a4c735", "sighting_of_ref": "indicator--c349652a-9723-498a-ac37-921a9ce4c65b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067c8ae6-82ee-4d98-9404-7bdf867b42b9", "sighting_of_ref": "indicator--e499fa4d-7f15-4b94-915a-711ff0552dee", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c80d42-7f7f-4e3b-933b-350cbb5be4a9", "sighting_of_ref": "indicator--e2721c6f-71c2-4aef-83da-513f2f49d222", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a81cdc-e82c-45b0-bdcc-eaedc5d4404b", "sighting_of_ref": "indicator--3e50ff79-1dde-4b5b-87fb-9a24bf0e24fa", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36edea13-6044-40f2-ba92-13c1b3f01ca8", "sighting_of_ref": "indicator--a51a142f-ec47-4da5-9e83-205b112d8740", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4554c73-bbab-4eb1-adf5-f35a74c665fd", "sighting_of_ref": "indicator--4bba08bb-8bdf-4082-b956-77cfc1029120", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e486ea89-58c6-44c0-b467-e6382e3c8dc2", "sighting_of_ref": "indicator--47c2198c-9ea3-4532-902d-464f00a9f9ea", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fbd4228-11ed-4dcb-9951-cd80c8cfe0fd", "sighting_of_ref": "indicator--2c0c3472-f6a7-4a02-a072-5e6af9ca40ff", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da11a51-d192-421f-96fe-e21b127989a1", "sighting_of_ref": "indicator--7e1c3726-6ab7-4d58-9b96-70f2080f6e50", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa4e5f9-0be1-4c59-84b4-f7da26bffd33", "sighting_of_ref": "indicator--e07878ce-5ee9-4014-bc9a-1eed1c8352e1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d76968d0-f26b-4a23-8c27-79f40427289d", "sighting_of_ref": "indicator--f40408d2-08db-45aa-a956-c69fbc000378", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1265d308-6e6d-4bf9-b8ae-de036ff93bda", "sighting_of_ref": "indicator--0ed3b131-2b5a-448e-91d8-3b274593cba3", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--232ba713-4a8c-4a4a-888d-2527877a2275", "sighting_of_ref": "indicator--de96e4e2-c9c5-4b52-9da1-d10390f87d36", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0dc1d3b-ebb8-4a21-bcab-c440d9574671", "sighting_of_ref": "indicator--e4728e84-e5fc-49cb-a4e9-4906321cb755", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631d4c5b-ce8d-4346-a9c8-f0fe9206a7d6", "sighting_of_ref": "indicator--a772a433-60ac-4815-8aa6-93f62161e3fd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75acd9c-11f6-46c0-8f65-b535cff0d2a4", "sighting_of_ref": "indicator--0db99626-1100-4ff9-8bae-44404afeb615", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5538dac9-2771-437a-917f-ae5466b96a49", "sighting_of_ref": "indicator--a39a1395-5650-4fa2-8b4e-1942bb639b4d", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15fe3e8a-4fb6-4539-b3d3-80dd3f58574c", "sighting_of_ref": "indicator--38e5c096-db14-4369-b79c-b708c057c59a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aaaf119-49d5-4d5b-bf84-3593ead518f8", "sighting_of_ref": "indicator--bc24d652-84f5-4978-be05-3408f9ef736e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7974b0d-ce58-4b8f-ae5e-d927f84416ff", "sighting_of_ref": "indicator--a7ad6fc9-3b86-41ec-a886-41e50d4eed10", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf79ae2-5135-4084-a590-6ed495931e73", "sighting_of_ref": "indicator--e3506f2d-6117-4058-aff8-d0c42720e521", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bcf42d1-dfcc-4423-829a-7edc2d7a6e79", "sighting_of_ref": "indicator--ad68405a-2d8f-49ac-a78a-d256d1bc6864", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6517efad-25ed-4749-9d2c-3501e484b139", "sighting_of_ref": "indicator--e571d126-7a4e-4c48-b358-2863ceb30e1f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05ae5ff-7c77-4b04-a927-0f2de29d1768", "sighting_of_ref": "indicator--f62fa637-3398-48ab-bde8-0a34a06bd18f", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16501c26-3da7-4567-a506-83187c9c8d42", "sighting_of_ref": "indicator--99cd19ec-6f96-4a2f-8f43-2173ecc0cd79", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aec4cec-d8e0-43f0-8bba-0a809049bc01", "sighting_of_ref": "indicator--9e29361f-f5ac-4570-86d8-469684b2aec3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c36713-89f5-41ec-b39c-a8cab2c16390", "sighting_of_ref": "indicator--c0076108-34db-4581-a0fb-903e304db5f0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9af08c8-a76d-40b8-adee-9bbf11ff47df", "sighting_of_ref": "indicator--c09c0dc4-af01-4b5a-8a85-a359017a2997", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c10ba8-1160-4b77-a4d1-11d4f6af3137", "sighting_of_ref": "indicator--d357f512-0af6-46fa-8714-ef1d0a5e99c7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--021d7492-0c19-4c4e-b789-ebced3790e0f", "sighting_of_ref": "indicator--e636e61a-d913-4cb9-98c7-3f9b039367c9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca4ea06-4ab3-449f-bc4b-9d73a886bbc6", "sighting_of_ref": "indicator--e636e61a-d913-4cb9-98c7-3f9b039367c9", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a55c61ec-661c-4996-b814-a6c17a425423", "sighting_of_ref": "indicator--b2485af1-4294-4b55-bdc9-8a2d2782ed36", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272c6f4e-0be1-47ea-b84b-a3fbb88661e8", "sighting_of_ref": "indicator--76d31118-451c-4a5a-b39b-97a8ee6d898e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c2fbf16-3b84-4742-80f0-6107e7cb710a", "sighting_of_ref": "indicator--5faae27d-3ef5-456c-9201-7d2d501051ff", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ad7e86-4b58-4833-93a9-9d52a3645e1e", "sighting_of_ref": "indicator--ac44152a-2113-4668-9d88-9964e804d7b8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99555ac4-6027-4c42-ac95-6bd18846afec", "sighting_of_ref": "indicator--a9542572-82ba-42ff-99b7-35f34ea32f69", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85c58de-71e0-4819-9117-0678db4db3f6", "sighting_of_ref": "indicator--41e57ec1-2403-4d95-aaa7-287d4c23d4db", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98031db4-674e-448e-90ef-b212da53a46d", "sighting_of_ref": "indicator--63dea134-cf25-4674-a05b-667097e6d931", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b9ddc8-ce73-4f94-bb30-6e02bd2a1c5a", "sighting_of_ref": "indicator--be783ba1-175c-40d9-b86a-270dc3b39a03", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aab8964-e81d-4378-8c4f-cea652a62e60", "sighting_of_ref": "indicator--c598ca92-204b-401b-a0a5-215f1ef58510", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eea42c16-d273-4761-a9af-25366035a4e8", "sighting_of_ref": "indicator--14738a1e-77e2-4427-afb8-acef54a3b6c1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46da201f-73c9-4040-bd1d-0ef72571336c", "sighting_of_ref": "indicator--f6c5d966-2e57-4523-b69c-69361e752d5f", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9ab79e-b119-4a22-8eec-b05595fd312b", "sighting_of_ref": "indicator--fbb03405-4166-489d-a8e4-eb81e39495d4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5d8e44-b9c0-4949-ae44-5a0c9f8a709e", "sighting_of_ref": "indicator--cc0721b8-53f7-428d-9311-ad62e573e259", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16719b9-cceb-4de5-8039-dd497d28567c", "sighting_of_ref": "indicator--80172b6a-886b-4d4e-8c1c-d2a9c1462779", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e5b1df-6c10-4553-9107-730fd6238d47", "sighting_of_ref": "indicator--b762719d-67f8-4d4a-84c2-42e2493f527c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84b61bd-d1df-4571-9eec-76d356285959", "sighting_of_ref": "indicator--63fc6130-caac-4150-ac5a-0971e07cd174", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b06f7ec-d2fc-4e93-aaf4-2e2441195301", "sighting_of_ref": "indicator--8493911e-6e7d-478c-9052-cb487258b6b6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a13280-c4b9-42c5-a3c2-8d4cc3afbd91", "sighting_of_ref": "indicator--737babad-8221-437f-94a1-55352eb096be", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6748be77-8233-433a-95ce-3d23d5b9faa9", "sighting_of_ref": "indicator--f5ca63e8-4efe-4b09-b873-d30da7d06d05", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20eb609d-4158-4d28-96fc-a9c14fda1ac6", "sighting_of_ref": "indicator--79d97217-6ea2-4879-8108-1973a9a294fd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ba9093-12af-4fcc-82b3-a08d0e390281", "sighting_of_ref": "indicator--2f9eb26f-045e-4143-aa1a-dabd1bbaa137", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2138cc1-2880-4474-9cbf-618232b144b5", "sighting_of_ref": "indicator--cf868b4c-5975-439b-979b-cfe60187f41a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08ffbe8-69dd-49bf-b9cc-242bd2171cad", "sighting_of_ref": "indicator--67396211-f93b-4e15-bf53-9c7e52973735", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a197535-0554-48be-b962-4312adf8ca42", "sighting_of_ref": "indicator--295f4b03-00fa-41c4-ab97-dbbc67782c3f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f9f6b5-b890-489d-bce6-7992a7f50189", "sighting_of_ref": "indicator--30d8c2b1-6b9f-4325-ad80-e4d57094767f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--132573bd-f835-4c16-b8e9-069ef31099ed", "sighting_of_ref": "indicator--bca21724-17ef-4ccd-bae4-027d85e2ba5c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ad4166-058c-45f4-b854-4b1dbcae76f9", "sighting_of_ref": "indicator--6d47d1b0-9d69-464d-976e-f8edee40acca", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4408c2dd-447b-4e04-b3cb-389aa946a3e9", "sighting_of_ref": "indicator--e3f6f6e2-30e1-4dbe-afb1-a95285769164", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a06ac7a7-ee4a-4788-93cf-9a7f649a624e", "sighting_of_ref": "indicator--ed7281ab-3441-470e-999d-181500327b01", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8cbcbcf-7ff5-41f1-a241-c989032c4478", "sighting_of_ref": "indicator--eb462aa5-c711-4be1-9ee4-64c8d8535cd1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7229d9-87c8-4706-ac8b-9a719e8c9853", "sighting_of_ref": "indicator--d2b8fb1b-ab28-409e-89ad-70fad8f9daf3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0beec8b-e2cc-4c92-84f1-9cf43313fd1e", "sighting_of_ref": "indicator--a4ec651d-9da9-4f02-90fc-cf8c81446da7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eebf2fe-8d49-48c4-bc83-c12cf54b13bb", "sighting_of_ref": "indicator--89b0668c-6c6d-4c33-a992-863a991b528f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d7c5a8-2440-442c-86a8-bdb0140df2a3", "sighting_of_ref": "indicator--8add7e68-4412-4176-a04c-6c01374e7503", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61637020-ef9c-4d65-ad71-11f2fcd94e31", "sighting_of_ref": "indicator--fbda0c7e-a170-4b3d-8ed3-2b8825e804e5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c413e4c-7b40-4068-babc-71d962b7f7bd", "sighting_of_ref": "indicator--c9645b0a-b601-47b6-9597-497f636fd6d0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4242ddc7-fcdc-4631-8d3a-0b8978320293", "sighting_of_ref": "indicator--07b44d63-9f7d-4651-8464-1074fd9dee26", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551aaa77-3e52-4f67-be75-df7af9eed967", "sighting_of_ref": "indicator--74010349-0b28-4930-b9a4-9045a4daea0e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a50311-63e3-40de-bd16-3ffd7a5d6815", "sighting_of_ref": "indicator--414a48bd-d1b5-4227-bdf1-ac65a683d64f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f384e451-b3e2-4b7a-b934-ad083256f41b", "sighting_of_ref": "indicator--7a92048b-84a7-4856-bdf2-d8e30d137bc2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14fe67ec-76ff-4a14-9c18-5bf16fb474de", "sighting_of_ref": "indicator--1da14428-5f6d-4533-a84f-f73f1b3e8885", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84d654c-660c-408d-9f89-bf34c8ff46b7", "sighting_of_ref": "indicator--34712c1c-7842-49c1-ba73-0bf7ce9747f3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa49649-3048-478e-b20c-47d57e0fd5c6", "sighting_of_ref": "indicator--dc4eab17-4cdb-49cb-9660-22bbc101f684", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a509959b-d8d9-4b48-9d89-20efd2fe1531", "sighting_of_ref": "indicator--db1593c5-b4a9-4f85-8592-2013395dd51c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694df0a5-fde8-482a-aa55-0892b4e5aa5b", "sighting_of_ref": "indicator--fc08718d-97de-402b-862b-38b05249e1b0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873210ce-ed7e-4924-8c6f-8eb4063cb09c", "sighting_of_ref": "indicator--2e4dff61-3efa-446f-8126-b64b6c842b50", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336d4ba6-7efc-4b83-b730-aa143396e3fc", "sighting_of_ref": "indicator--3737c690-0250-46e5-bc1d-6a1aa7ee9edf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4941e05f-9ae6-485c-9724-3a7e30573668", "sighting_of_ref": "indicator--af42a3ba-4451-40e5-a95c-ae71bebc008d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e50bafd-b595-48e0-956a-15425b3d7544", "sighting_of_ref": "indicator--db9771e6-ca8f-444e-9e4e-a1982f08765a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0107130e-7c47-43b3-9df4-1d86fcb4eeea", "sighting_of_ref": "indicator--d2345d4b-54cc-49f8-b6f6-1a55afe2983a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afcf4757-457f-4b32-9c2c-38b152aef245", "sighting_of_ref": "indicator--809a1eb8-559d-4321-97e1-9c2f4d4e1f3e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97103eac-e7da-4551-b6d0-7b41b3b12806", "sighting_of_ref": "indicator--ec73bf13-d4b5-41ae-a345-f7a176496109", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32122246-f6ca-4fe5-97d4-5feda7a52305", "sighting_of_ref": "indicator--dcf65ce3-ab1a-419e-bb5b-a9c5c28a379a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b993b6e-3ed5-4a8d-b9c6-054013c81dd1", "sighting_of_ref": "indicator--1e80aab4-45c7-4baa-b283-6ff8861e5ec4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163122ba-5e9d-464c-99b3-1a71419e4c10", "sighting_of_ref": "indicator--ffb7c621-dc59-4b01-9a13-39731989b65f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4874822a-6c6b-4dab-9ed0-dffd571ef04f", "sighting_of_ref": "indicator--9d71869c-622c-4636-b3d0-f30fbe243108", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f6729e-2493-4ee6-9ea6-69f5c21ec3af", "sighting_of_ref": "indicator--2b82e48d-b38e-4450-b28e-80f4bd34e0be", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--befee8f1-f7a8-4f95-b6b5-21821108010e", "sighting_of_ref": "indicator--f3aded36-e183-4a02-b336-a9343e7ee2ed", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3edf4e-c2ca-4853-b223-3cb0dbd00954", "sighting_of_ref": "indicator--e9f740dd-00bc-4a2b-b9c5-8d0b3f7d8b29", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4fcbca-e564-4edb-859a-592e4e0810aa", "sighting_of_ref": "indicator--ba61ca6e-7386-4378-b7dc-7fb5b6e5a065", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4535f57-b84e-4eb4-b4e3-f6ec774822dd", "sighting_of_ref": "indicator--c5653b5b-aa2b-470b-bff9-6019626aee16", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--665cab5c-217e-4bb3-b5b4-24e277247a08", "sighting_of_ref": "indicator--c3130f0e-fb22-4f1a-ad2e-619ddbc705ad", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8461ae-3e5f-4853-adcf-8dc11d3d7045", "sighting_of_ref": "indicator--e54e6c95-e115-4216-ae10-646cf57eebf8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b64181a8-3c88-4a06-9ecf-da3a5242c741", "sighting_of_ref": "indicator--6500d278-0193-4587-865c-aa2b5d185855", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--746b7df2-6022-4c9f-8226-66551ece3874", "sighting_of_ref": "indicator--429e7317-60ac-4254-9351-183c1b4e264a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--146609fe-d6a0-49eb-b44d-0390b908dfde", "sighting_of_ref": "indicator--e715b2eb-bc84-45a2-b9f8-c23ef130d94d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f7028ff-5ca2-4c69-933f-2a6cbcf26d6f", "sighting_of_ref": "indicator--f1b7593a-8656-4975-bca2-bc7b05b956b6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f72ecf-235e-4f8a-850b-cc5c465bb7f5", "sighting_of_ref": "indicator--9f938c24-8759-483c-9f2e-ed17b12dc9ee", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1483b757-471c-440b-b43f-d3c7922cce53", "sighting_of_ref": "indicator--c349de8d-0577-4bf6-88b8-cd9bf7459fdd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe9e62f-a7c2-447d-989e-7438c558e960", "sighting_of_ref": "indicator--8ca7684a-20a0-46bf-a0f6-99be60559f2c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b5e734-e1a9-43b9-adeb-63cc9e8e0f0b", "sighting_of_ref": "indicator--96ffaed6-9d61-4f85-909f-535c2972d5cf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d30fb67-2ab7-410b-87d1-2940d6db5e7c", "sighting_of_ref": "indicator--ea4a7831-768d-423d-877d-5c1c35a483bc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f0f62c-645e-4539-9c69-b8ccac2a0494", "sighting_of_ref": "indicator--db9ca499-588e-498b-805a-383804df1552", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d38e40-c8e4-4964-b0d7-1df7634e6882", "sighting_of_ref": "indicator--e68c2cee-7592-4130-a258-e244e3f5f21e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--021dad0d-8f8a-480b-8566-44927fc0fc11", "sighting_of_ref": "indicator--4f5a0e98-5ce2-4215-8fa7-85c209ad59bb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f87fbcb-f7b7-4c9e-8341-4e7ccf345131", "sighting_of_ref": "indicator--93a73b61-21a1-4278-a4fe-3cce71b2d3b7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc73f936-01da-460f-9b26-0a23de175503", "sighting_of_ref": "indicator--d82aa620-fece-4668-908a-5fbf63cc1b38", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a27365-d553-4845-9b62-374e45761726", "sighting_of_ref": "indicator--8f10389c-652d-4a4b-a624-3cd9c156919b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7303d6f-b2ac-4ef6-a5fc-ef9786df3cac", "sighting_of_ref": "indicator--002d1d60-d5ad-4318-be57-b5c8b4b34ba5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea5e5a4e-407b-48ec-a4c1-0a54e8850f0c", "sighting_of_ref": "indicator--a4e04119-aeaa-463e-9cef-76498a8d7782", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4579d0d-a814-4e37-8514-8c2488a4b0f6", "sighting_of_ref": "indicator--8ed03209-3b62-4f9a-8a6b-dc7580668778", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--180dca70-2948-4727-929e-0f455a23c2e5", "sighting_of_ref": "indicator--7ecf3034-17b3-4672-8b87-a8304065ee7e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba94eca0-f0b0-4ec6-8193-d580f50422b1", "sighting_of_ref": "indicator--52e6a600-4275-4e1b-9c0c-793ced4cac6a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7447528a-01f3-45d4-9646-23de211f72c6", "sighting_of_ref": "indicator--10bdf39f-3906-4221-8cb8-482f707d3953", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8734978-0c1b-4232-bd8d-0c3fa512a2fe", "sighting_of_ref": "indicator--20cf3232-6a7c-46fa-b8e1-1c33719fe1f7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3eb3369-e847-4a32-b535-ccb23026cd46", "sighting_of_ref": "indicator--a7ccf2af-fdf0-4f30-8fa4-329d6b25db85", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14584216-5480-4190-b661-7e7b95492924", "sighting_of_ref": "indicator--96e3eea2-0285-48b2-8a74-e630edee6b93", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719647f1-45ad-4f27-a0ee-4261df07b9f3", "sighting_of_ref": "indicator--2f3765eb-aa04-42e0-a8b4-b6c8dfa9b957", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b215a99-290f-4b2f-b67a-97f524c06779", "sighting_of_ref": "indicator--03fbf601-f2aa-4623-80a8-3455545fd1bb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de4f931-b481-4c68-bf2f-26a91c47a839", "sighting_of_ref": "indicator--6dcbece8-3077-45a8-b390-ff6f6444b716", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f2e56fc-89b8-4af1-a26e-8ab366695a26", "sighting_of_ref": "indicator--1a6509dd-3003-4f8c-b176-2ebc0ddde006", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74510bde-734c-4e86-b86f-c0036aa45a0e", "sighting_of_ref": "indicator--961855ed-2316-4cb6-abf8-ae6bb6a52775", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea770570-b271-477c-8120-77a09b7e1606", "sighting_of_ref": "indicator--f001cf34-0b9c-4520-86e3-a19e4f66e935", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f3336ff-73f3-4803-bc4e-b6c41e6ce75a", "sighting_of_ref": "indicator--adaa66ed-c5b6-4146-ab6e-db7b6e1b7192", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eacae359-199c-48ee-bfb6-1e2d1db0a0e1", "sighting_of_ref": "indicator--c09f8521-515f-46af-8df4-3bc97a4341d6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd09058-e550-4ad4-99b1-2c63e911e16c", "sighting_of_ref": "indicator--26fcc9e3-eb9e-4426-91af-8f19e6f033f3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf168ec-2d36-4140-99da-894a17030ff7", "sighting_of_ref": "indicator--120d1363-4f26-40fe-b38c-563cce172ad7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a349648-236b-4b10-9505-de38a1a3514d", "sighting_of_ref": "indicator--2838c2c1-3c62-4a74-aede-bce31fd42187", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dcd909d-8b71-4df4-a16f-f6a223d06681", "sighting_of_ref": "indicator--1a0a2056-fa15-4120-a732-a5e239d1bf85", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5677dda-a988-4c93-81c5-3cd86e28c141", "sighting_of_ref": "indicator--c46357dc-75d6-4813-858f-26bf26390edf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c30b2f4-4ffd-426f-b09c-a675f33e3c9c", "sighting_of_ref": "indicator--f0e138d1-5cb2-4f47-9271-4aec132c7030", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09e1c31-af26-4780-8383-15dbaf53a6dc", "sighting_of_ref": "indicator--f71d9445-b18a-4037-b34c-6014e5a007c7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907bedf6-2f94-40fa-ae38-22f4d52c5eaa", "sighting_of_ref": "indicator--fa8a3ecb-200c-490f-a3ef-9e2dcd5a396c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53019f8b-5122-4cd2-8256-82d21eac9c34", "sighting_of_ref": "indicator--577d64ac-7430-4b7f-a29d-70bd75185175", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e54cc8d6-d380-4c87-b642-7c1b7ab936c7", "sighting_of_ref": "indicator--f25d6d2d-ca72-4f4f-be55-e2e81d69ef96", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2196305a-39a4-4dea-8cd2-b2738e71bd30", "sighting_of_ref": "indicator--40fdf28f-0ac5-4579-a3b4-6e4a56f77684", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c1e1ed5-9095-4db5-8350-d91eb347c18c", "sighting_of_ref": "indicator--0bd2690a-2065-4d91-aa02-68118798272e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c78369-0e88-41f1-b4f5-0aecb8c55223", "sighting_of_ref": "indicator--63f1f358-bde2-4681-ac63-082d1bb0c5f5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e13dd71-2318-4026-9b56-b21be7df862e", "sighting_of_ref": "indicator--2576af21-7d7f-48ff-b27a-694ffe0a33c0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc25ee5e-a908-4267-a929-f6c777415e2a", "sighting_of_ref": "indicator--1539122c-6e0b-44bd-806f-b40660e12975", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87584762-192c-4801-bf70-c646d2132f12", "sighting_of_ref": "indicator--a8f48e70-59af-4c71-83e6-3cd191b1604f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd2817c5-1b12-4fa4-8b13-697819761999", "sighting_of_ref": "indicator--88dff3f3-da6f-4959-b631-aeb94442eaa9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acafa949-aba1-4063-b4d4-ab623dadb4ef", "sighting_of_ref": "indicator--eb0d8e3e-a528-4711-b7be-ccf8816561f9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1092265e-05de-404f-93f3-18d7b8f359b6", "sighting_of_ref": "indicator--e171d02d-96c0-4d98-8bc5-218605253ed8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7bf0438-0b36-40df-a2ec-daea7021e033", "sighting_of_ref": "indicator--92715425-ce04-4414-854c-c31ebc4acc54", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec44b75-0138-473a-9556-f7514b0b5dc9", "sighting_of_ref": "indicator--2409e73e-4152-466a-99e4-927275885280", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87206694-1987-4c15-a3ca-acf59eae38d1", "sighting_of_ref": "indicator--bae53f11-ed0f-4090-87a6-cf0eaabaf59b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a48a857-ac89-4772-944d-f598ce54bf0d", "sighting_of_ref": "indicator--b01181e1-7c7a-4bcd-84a9-f025b3623de3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b4ef243-91a5-490a-9c9d-c179ca30b31d", "sighting_of_ref": "indicator--7fb9f9c0-503d-4f43-b388-33c3ec922457", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd95cbf0-789f-4b1c-8f53-2e760d0fd436", "sighting_of_ref": "indicator--7e96188d-ee99-44b4-bfba-76fdb01cf025", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68aa05d7-0fef-4a44-988e-62346c02869e", "sighting_of_ref": "indicator--033cc09b-3024-40e8-b144-26d8687d7693", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa619afd-c1c8-403b-a3ce-897822b9d3ac", "sighting_of_ref": "indicator--fbd7aacf-94c8-4b50-800d-f7927f9db3bb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d58b14-2b51-4e1e-a8f1-616826199a8c", "sighting_of_ref": "indicator--92c26426-4f9b-4547-a208-8009a5434dc0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd7824b-19e5-4a32-918e-4bbfb361b4a2", "sighting_of_ref": "indicator--ff7b72e5-3026-499e-890d-b86c3f8937cd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c6c7c2-c684-4c97-ab5c-f649fad0d16a", "sighting_of_ref": "indicator--2a8a25f6-c160-4ada-ab69-c59dd5c3a6b1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4933fe-5f2f-48b0-9876-9efe2b8e2835", "sighting_of_ref": "indicator--7f434298-6012-43d8-96e7-798275b3f9d4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae4bcaa-80e6-41a5-bff1-b243f9bd335b", "sighting_of_ref": "indicator--a3aab40d-df39-46a9-bc36-5ca948415c64", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6a48eb-53ba-4e86-935b-f76ddef50d4c", "sighting_of_ref": "indicator--04ea40a8-e437-43d5-858d-3c395f3a2bd9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7090848b-8fbd-4fb6-ae56-3768ac2dd045", "sighting_of_ref": "indicator--0e9be9ff-5fb5-422f-b734-2367396ad3ab", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccfe9ed3-937a-4314-83e7-d7574854e583", "sighting_of_ref": "indicator--3de5e76e-0cda-4942-9c39-043b4e1db536", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365218e0-5543-4e50-b038-4d979d072201", "sighting_of_ref": "indicator--a6a2d6fb-bac1-48ad-b155-0a74bece7852", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f4f53d1-3d5c-489d-9a9c-592b60474b76", "sighting_of_ref": "indicator--5ba860d6-f6f2-4d0c-ada9-74d65a677889", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00cdd87a-e0a2-432a-982b-3114858dd892", "sighting_of_ref": "indicator--f329a749-0068-40e9-ac9e-011954402ac4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdaa5449-455d-4299-89c6-63402e534583", "sighting_of_ref": "indicator--3b32ce75-6b8e-4ba2-80de-aa18606eb64d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cfd5377-57cb-4f72-ad25-04735b73a389", "sighting_of_ref": "indicator--08a8d647-c109-44e3-885d-b6cc8c1be31b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f482f79-e121-4b43-a558-3e4289ff3998", "sighting_of_ref": "indicator--6886c2b1-0828-4a68-9cc5-38dd687bf93d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf21b19-0d08-4950-8b8b-67e01be66a2e", "sighting_of_ref": "indicator--c6b1665b-b907-44f2-a428-2e8a09826e47", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c8ee53-077d-482f-905e-8faa06948c12", "sighting_of_ref": "indicator--5e6b5f4c-b306-4c5a-bef3-905e3afa7326", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a96401b-e490-4cde-b5c6-7a5c109f722e", "sighting_of_ref": "indicator--74f26a0b-8b58-4cf2-9bc0-53e9121f3db0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50bde3be-64d2-4e05-96a0-9704d536595a", "sighting_of_ref": "indicator--01d59390-7b26-4c43-8dd8-ed0343328eca", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a531bc0b-2584-4941-abde-4908ac249ab4", "sighting_of_ref": "indicator--be8d06f9-6015-42a6-8c34-52c49bb490fb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c50a70-41af-4d47-b0a6-55e64a095735", "sighting_of_ref": "indicator--ef225337-6280-4f2f-8c76-20ffc21a52ea", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef0ec8e-1cf3-4497-ac6c-e4fcf343c411", "sighting_of_ref": "indicator--fc6c6d8f-55de-4950-97d7-e410854e5eee", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f4a4cc-492c-4219-89b0-67ed0a172474", "sighting_of_ref": "indicator--5b42ab63-d3a9-41f2-b2f6-36d8698848c9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7cd783-c030-4529-8e0a-e5ad94896d6a", "sighting_of_ref": "indicator--d68e2267-b60b-4add-af2a-e393838daea9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d713a9a7-3457-49a9-b8f3-c677b4c094db", "sighting_of_ref": "indicator--d3cfd2ef-0bcc-40bf-a3c1-eca327002416", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b5287d-a68a-442e-888a-b4e584dcdf39", "sighting_of_ref": "indicator--31cb752a-8389-437b-8a07-56c032e39cea", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2157c572-9326-4648-a829-577e3a712089", "sighting_of_ref": "indicator--09f91f89-ad09-42fb-8f93-f6ad80580da5", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a7b205-910d-4ec8-b891-7660686d93be", "sighting_of_ref": "indicator--2ecf0386-62ed-4449-8f9e-e5968ad68b56", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f108eaf7-6556-4d74-b6ec-92ae53715275", "sighting_of_ref": "indicator--557111cc-9a13-4032-a297-506cc27d96fa", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd327480-9861-46d5-ba36-b85f48407bb0", "sighting_of_ref": "indicator--0fcf679e-373b-4a72-9074-b8dd2e2be06f", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b6c411-b9b3-4410-bf56-fe52404e7de9", "sighting_of_ref": "indicator--831927b8-d1d2-4f98-8db5-aada377e1f27", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5197124-2d43-4d57-a0ba-34a7839281e2", "sighting_of_ref": "indicator--4ce04a51-cf85-43ed-aaf1-27c176d2ef6c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e786b1-1696-4f23-b74b-401334a9d14f", "sighting_of_ref": "indicator--9680425b-25ec-4e8f-b4b7-a8d127d5bb99", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eddd3c4-f9d5-440f-b1e7-5c72ff77c6a2", "sighting_of_ref": "indicator--10ef9f29-01db-4441-8da1-ceba42fd37f1", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af465d08-cfd7-4a22-a75b-309d620a204e", "sighting_of_ref": "indicator--350b12f7-7282-49cb-b0f7-5b1a896bbe52", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95392d27-eeed-4096-8022-a55b5aacf9c9", "sighting_of_ref": "indicator--20e7cafa-f81b-4ea5-9148-df31b8cc9081", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22008715-f437-407e-b2dd-ef2caa264530", "sighting_of_ref": "indicator--ceb61ca5-0868-45d2-9722-1b572a056d8e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb9e76d-15ab-46f3-a2f4-b09688c55416", "sighting_of_ref": "indicator--8498cd0b-cd4e-4411-8829-823186092d75", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f19bfcd-c75b-440a-9cc7-ee92ddf42844", "sighting_of_ref": "indicator--6da79af8-0f26-4eb1-9959-0df7e06f1280", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1140693b-9f64-42fb-873f-591b184f8683", "sighting_of_ref": "indicator--917cc090-28d0-4a62-9dac-77defd527e3e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2120b21-a7b5-42a8-a15a-d12eca24a210", "sighting_of_ref": "indicator--e18b60f0-831d-4a64-bc60-7249479a7cd9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5cf922-b834-47be-9096-4d0c992d2bb1", "sighting_of_ref": "indicator--547cd502-a808-4448-b5bf-923486c5f455", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbcf604c-2030-4beb-bb32-518c13bd72ac", "sighting_of_ref": "indicator--250b16f0-6f10-4ec4-80ec-4682bd9848d1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1042a8d-ee1b-4dfe-8fad-a54697749e2a", "sighting_of_ref": "indicator--1715d89f-80ab-459c-8c33-81fd006359da", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad96414-04b3-4dd5-aef6-b1028292d1f6", "sighting_of_ref": "indicator--0ef25d97-75c1-49f9-822a-7c369b0aa80e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0066c92-c0ee-4e6a-8ec7-ff9b55ece172", "sighting_of_ref": "indicator--31032687-1965-4e9f-9a02-69e165292d90", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98d64c7-5fc7-45b9-b31a-6b8fcbbf74d0", "sighting_of_ref": "indicator--d1ed6275-506e-4fda-8adf-58ab415e446a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53752d9a-f321-4d61-9f45-b0e1ce6c406a", "sighting_of_ref": "indicator--23ae4d3c-3409-4243-b946-6f1506543a54", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45f8af9b-a4bd-42b7-9e20-2c8de800addc", "sighting_of_ref": "indicator--ad22a120-7cdb-405d-bc5b-8c605624d7e1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b50bbdb7-d938-4cc3-9cf9-5df80e12efcc", "sighting_of_ref": "indicator--ba1216cb-4245-42bd-8502-4aa566032037", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf831437-d7e0-487f-9238-396d32367c29", "sighting_of_ref": "indicator--cdfbd89f-1c16-42c1-9ae7-2f124809b3d2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8450ea19-c8b1-4cab-b3ad-598a4137a3ef", "sighting_of_ref": "indicator--4870f864-3401-49dc-9213-948e814fb5ef", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da89443-d1d6-46c6-8652-4903766e4c53", "sighting_of_ref": "indicator--31234f18-bef4-47d0-af4a-a387c023261d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0bce1ec-6808-420d-a531-b7ff84d42c6b", "sighting_of_ref": "indicator--27254d85-4a3e-4b8c-8de3-fd19b0f85103", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b461e9bd-fc6d-4dd9-84f9-857e5d357744", "sighting_of_ref": "indicator--b863218c-40c3-4f68-9c0f-660717a5e715", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad7665c-4b19-4c52-8927-b41c09c2592a", "sighting_of_ref": "indicator--056bf9a7-4b2e-401e-9c9a-820da86de292", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a5fd3b4-492b-43a8-9206-f53082657649", "sighting_of_ref": "indicator--87fc73eb-fca8-4ce9-9841-ac566eecb569", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c623bdda-4145-456d-b89a-481fda5b6844", "sighting_of_ref": "indicator--238bc936-1137-44b9-8606-7bb7a26d3150", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89cc0471-df89-4351-8e77-5995229c7d97", "sighting_of_ref": "indicator--d27dd944-f5f7-4268-ac31-fc82bc45ca72", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ce6cf6-926b-4b1a-b149-663a40ddd37f", "sighting_of_ref": "indicator--53f7a470-b741-4953-bc59-d56f64ebbbb0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0497391-e414-48ad-8cee-9614f14a3a91", "sighting_of_ref": "indicator--4217ce8f-9b7e-4e3a-98ec-6c7daed775e3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6236dad-4cff-43bc-af33-3982c8814dc9", "sighting_of_ref": "indicator--4f08a4ee-f2cc-4f5b-a581-e3ed55b9e625", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3e5ee4-bfb9-4506-8af1-30574d501618", "sighting_of_ref": "indicator--4ca96b7d-be2d-4058-9183-abf543dc1231", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b17ff7-19ca-4800-8f6a-bde1fed6a3f0", "sighting_of_ref": "indicator--c1ff658e-5462-4df5-8276-d2155389c334", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a78011-742d-40aa-87eb-e951b15d12f9", "sighting_of_ref": "indicator--03d2dbc0-4f9a-403e-a366-e4aea7165f0b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda0bfbb-50d0-4801-a7f8-177f71717415", "sighting_of_ref": "indicator--4ed0b0cb-4cfa-4748-9898-658aba20e3e8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c0fafb-6e37-4e15-a6d4-c68b2b6903c9", "sighting_of_ref": "indicator--a63230aa-a367-4686-92c3-be2ec5d15745", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c39afea7-30dc-4d70-94e8-118ac59f0dae", "sighting_of_ref": "indicator--f8d799cb-d8ad-44da-97d6-01f1890f44ff", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d7e17c-8a8a-4622-9b1f-87e9d450555b", "sighting_of_ref": "indicator--63b63346-2442-4077-9bb2-45e8eab3311d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3cda89-6ce6-4964-a655-0df5f93c73ca", "sighting_of_ref": "indicator--c3af5058-fe99-46c9-87ff-f1728bf7abfe", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--257812fd-1007-4ab0-a9fd-27bd98a199f6", "sighting_of_ref": "indicator--c8e4a968-6066-46d6-bc34-4ba06b6090b5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--264d9e62-fd73-42c6-ae53-ef4107747017", "sighting_of_ref": "indicator--11e94275-2046-46a9-b763-111ff6b6d468", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6b993b-02df-406e-b4de-8ee42bf9ebf3", "sighting_of_ref": "indicator--757cf13c-bb8f-40d9-b434-e7361344f2f0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb384bc1-363e-4ca6-bacc-e7ab844b5217", "sighting_of_ref": "indicator--742891e8-4df8-473f-bf0b-9a2c852569fe", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf05f54-5092-4794-a9c4-6dc63c212a85", "sighting_of_ref": "indicator--3ff6b91c-1677-4d10-8eb0-2d8d637b4c55", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--481f9236-1ca2-4792-b5e0-f781e45f8e42", "sighting_of_ref": "indicator--3ff6b91c-1677-4d10-8eb0-2d8d637b4c55", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88dd3643-9397-4e00-9747-8de60b9136fd", "sighting_of_ref": "indicator--77f68fbb-9f73-4ea0-b7d8-647b45dc535a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73c8478-b794-4730-adb0-eea6ed56a07e", "sighting_of_ref": "indicator--add83020-c913-4066-97cd-6c34062d1334", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd351853-8f26-4211-9282-de205acd51d6", "sighting_of_ref": "indicator--92554af1-4013-44dc-a9d6-432f7767dc1f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b82edb-20b2-4bd6-952a-72627bfdc71d", "sighting_of_ref": "indicator--e596b927-9cd4-4ef4-81eb-ac0c9fcd904a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16691308-3025-45a2-9faa-575f5af770a4", "sighting_of_ref": "indicator--54dd4b36-eff2-48b4-831c-14fc47e4e81a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e497e22-7fb3-4d0d-99a7-20f8ff14a4f3", "sighting_of_ref": "indicator--7247a694-3c90-42c0-8fb2-2a44e84a2aa2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a679fa9-52d1-4c27-a8e0-2c06690f424b", "sighting_of_ref": "indicator--a583d59a-95db-402d-9793-eeb71257230e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993b3ab6-bf0b-4219-9f11-fcc4256abed2", "sighting_of_ref": "indicator--25d1cb19-caf3-4b0b-83ed-8924d1bb7eb2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b2e643-3ba4-434f-af3a-13cabd389927", "sighting_of_ref": "indicator--92ed6030-02c1-4794-a1b3-1f96b16eb8b3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77af2df6-057a-4b9e-9e3a-1e406da70884", "sighting_of_ref": "indicator--f5450a1a-81b2-4115-b08e-91cbd7ea5574", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90cc1d25-a54e-48f4-9f74-a88b23af34e4", "sighting_of_ref": "indicator--6615714c-29f9-4214-bcee-a28d5e6e36d9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32659770-57b6-4401-8e2f-bbdc6edc503d", "sighting_of_ref": "indicator--205b3396-45f7-4599-8a28-9cab16d9ed2c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19c5f0e-6553-44aa-8771-5679a5e99abf", "sighting_of_ref": "indicator--d077ad5d-5a7a-4ad3-b825-f5be7b3bee0f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a632c80f-e5bf-4553-9031-3a4b8c71c06c", "sighting_of_ref": "indicator--87aa3f9a-be9a-4a49-ae90-f586157bfaad", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb8020c2-a6c7-4bfd-8d1d-433156d8bf12", "sighting_of_ref": "indicator--e06ff0ab-648e-48ac-951c-ae2eb1820805", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16af743-f51f-44e0-a8dd-204b0dcc58b2", "sighting_of_ref": "indicator--3e28e41b-a6f8-4e5f-9424-c404b620b6b8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c7c501-4bb6-484a-bccd-90931d1630ba", "sighting_of_ref": "indicator--7c0ba340-443d-4e2d-a6b6-eef8186e63e7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb145d0-5317-4d23-a87a-5ddd37d2158b", "sighting_of_ref": "indicator--107ac0fb-d809-4540-9687-df3db123b818", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b7563a-2e58-4106-b6bf-d855010a8429", "sighting_of_ref": "indicator--9407b400-24e1-4746-b441-05205074f265", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaba032c-4b54-4ea3-a87d-e2d82f03d6a9", "sighting_of_ref": "indicator--58ddd50b-e34f-4b83-8c60-c0be776e2cb3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68607bee-8c18-474f-b7a8-f63afbaf75ae", "sighting_of_ref": "indicator--752301f4-98e5-46c5-b2c3-085170faa5d0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf82cd33-4aa1-4abd-9d65-bd1a372b5ce1", "sighting_of_ref": "indicator--342d75b6-81c4-4186-8cbb-013741db9b07", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82da5c5d-9f29-4d93-8904-43d4c2e0c918", "sighting_of_ref": "indicator--c61794e2-cc4b-496f-8ee6-3a4bba6ba84f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0877f1-0fb9-47d3-a8fe-070276170ef9", "sighting_of_ref": "indicator--c80e3f83-a5c7-4b33-8f09-c355279d56c2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d342a21-3d5b-42ee-82f9-523ba5399b78", "sighting_of_ref": "indicator--599b9db8-0093-425c-b30f-48d4e5df52f7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4380113c-4e7a-42bd-b45e-4c802a95c783", "sighting_of_ref": "indicator--835eb628-ac06-4feb-a7f0-b9922ea1d458", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8ef043c-c53c-493b-b225-36abe35422fc", "sighting_of_ref": "indicator--e9a80b40-106e-4570-a795-62b5cb51eb70", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--813d7f8d-a071-4b11-84bb-8b8dfa4fabbb", "sighting_of_ref": "indicator--cec317c2-9df2-43f0-8640-54087eecdbb4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c0fe88-155c-4e6b-b943-b2622c8883f1", "sighting_of_ref": "indicator--255bec97-01a5-488b-84b3-75eefa3aebf4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c2ba5d8-0522-4353-8aab-084d6817c34e", "sighting_of_ref": "indicator--c7565b46-43fb-469d-b35f-982fe63c3c96", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfeef8fb-1b56-4622-901c-9e1e1e235df9", "sighting_of_ref": "indicator--ecc3cb94-6c77-4a18-8142-bba4aaf5b6ae", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f798854-d881-4d48-98a4-e8ab58fdec3a", "sighting_of_ref": "indicator--9040832d-83e7-4453-8b47-0f4d03373bf8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3034569d-b811-4041-9b65-e0f3428301d5", "sighting_of_ref": "indicator--dd313f45-2dbe-4bfd-ad23-de804aaed6a3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f23b11-44f3-4dea-ada6-c8e61456c352", "sighting_of_ref": "indicator--3658304d-cbbc-4f98-aee9-94fa0a2c93b6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0bc8a5a-82c1-4f52-9f3a-ab385174bc3c", "sighting_of_ref": "indicator--938a7613-ed8d-4441-b7c7-8f3a50e3d81f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81471e3-ccc6-4beb-8f79-c3ea372b2a95", "sighting_of_ref": "indicator--b6bb6dd2-82d2-45ec-83a0-2759b810cfbb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f962cdf-4e72-4c53-9d9e-69989140026c", "sighting_of_ref": "indicator--c9433e6f-8d0b-4f46-ba99-3fe42862a0b2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21bf2592-e4f1-45ba-bfb2-4cce65241f50", "sighting_of_ref": "indicator--21855e9e-513f-43ef-9151-082d3bfc45d2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed40190c-3ac6-4f4b-8491-cb9a4f1b60c7", "sighting_of_ref": "indicator--10622756-d524-4813-857f-5e0cdd067820", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0183ed73-0c28-4c91-9ee9-254bc660121a", "sighting_of_ref": "indicator--23111d26-8c34-467c-8a77-a1461dc274b7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fb4ea3c-a7d9-4119-9149-092f83779de3", "sighting_of_ref": "indicator--adb13645-7468-498a-aa6f-a3d1fc706c8f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586331b8-ffb5-44d5-82e1-2a0c8583c8d1", "sighting_of_ref": "indicator--d1e05041-5428-4907-ac3c-0997a45a4774", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--445a98db-0f33-4fc1-87b5-df54f9c73930", "sighting_of_ref": "indicator--13e37be4-8d91-4dff-8381-9ec50eba70e9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a325689b-0330-4810-96e8-9540416bbbd0", "sighting_of_ref": "indicator--d2606850-e1e0-47f5-aa17-82d86bf0ae5a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04808b95-d66e-4a7b-9990-3584eaa1e17c", "sighting_of_ref": "indicator--024ce696-901d-4b1a-9b65-c5babb25cd9e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54825b95-8ce3-4053-b1b4-ed5a869987c5", "sighting_of_ref": "indicator--18a97cd3-f51c-409c-ba85-cc21106a942e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcdaf4fd-00d9-42e7-aed0-9512739a1f9b", "sighting_of_ref": "indicator--f589f103-e957-4326-abcb-5cbbd15b0b65", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2034c2a-2f56-48bd-b01b-84b5603b2333", "sighting_of_ref": "indicator--711013c0-ba7e-411c-9ff6-46041448de65", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad321ca-2908-4c01-8af9-9052cd37a046", "sighting_of_ref": "indicator--fa21dc7e-1457-44cc-be21-4de8c716893a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b2a76b-72a3-4f9e-9170-17d79b91b80a", "sighting_of_ref": "indicator--9c56402a-9b2e-4cb5-9d59-d86872563801", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b9b22f-3f78-46dc-b8fd-378c7e2c566b", "sighting_of_ref": "indicator--bc21c0cf-43fd-4423-9163-efd74ecff9b1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab74c76-38e8-4a13-ad9d-84ec540ad3d8", "sighting_of_ref": "indicator--9eb77065-3de6-4105-995f-ae86e33dd920", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c419f2e-5466-4993-88ed-257a17d6d9e9", "sighting_of_ref": "indicator--babf2fdf-1696-4969-b13b-2e84cbfee91b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c95eb37-b496-4230-bd60-ccac51ab9b6e", "sighting_of_ref": "indicator--0f8f1322-c053-4ab4-9773-fc9338a1f8d8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23170c2-12c9-4f5f-97f7-3ce5a2a11a28", "sighting_of_ref": "indicator--96382edb-cbab-4b16-ab62-d4254b373507", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7276ce-7abb-4c50-af00-3b9b665097c1", "sighting_of_ref": "indicator--b47f92a8-16a9-4941-8384-16dfc17b9dcd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe15602-38e0-4320-a3a3-bc63943f737d", "sighting_of_ref": "indicator--b4e0f73d-1ca4-4856-8286-b49413949693", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9729288-c486-4f98-a6d6-21c4bef89d51", "sighting_of_ref": "indicator--79c364af-89fd-436f-8feb-d3a696e2ab8e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad907211-5165-43ae-856c-42e02de844be", "sighting_of_ref": "indicator--774d7c3d-eea8-4167-8506-0c01940b888a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea545ed5-ca6c-4d42-9dd1-3f7fa9aca654", "sighting_of_ref": "indicator--be0e79b3-0e6c-4c3a-990f-20c535289e2a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5797d7d7-8823-4fbb-8e6e-97e07982e79a", "sighting_of_ref": "indicator--4c853437-cb7f-46f5-85e1-29fb645c656c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e70df9-2a92-4173-9493-30707273d8b2", "sighting_of_ref": "indicator--fa56da59-a239-4158-9dfb-243f2706c084", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a17d2b-8f64-4d31-972d-65e38976c063", "sighting_of_ref": "indicator--4e78b01b-7481-4d81-bb94-758a22c3be13", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71120a1-a40c-4402-9880-930a8599a4a1", "sighting_of_ref": "indicator--bb70e9d4-4ae3-4bfd-8972-1a01cea6df23", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5df67bd-e2ba-4ba2-b4a0-02043ba1e8fa", "sighting_of_ref": "indicator--71bda82c-2c7a-4c28-8798-9b58f40c1083", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a1ad17-b312-44ca-bffd-3b81c0f26f05", "sighting_of_ref": "indicator--de58d122-1df5-467d-b3f3-10fdb444e328", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e728d396-3ee8-42f4-9a7f-968b61a8eb8a", "sighting_of_ref": "indicator--688080ee-411a-4053-af75-9a9a376fb947", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a839ec7-b1aa-4c6d-9834-77c43c68ea12", "sighting_of_ref": "indicator--25baf5d7-d558-4f3d-aabd-6b83176eec65", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0807f1-5bc6-4999-b61a-4d4141f38edd", "sighting_of_ref": "indicator--e47617f0-f5fe-4243-80c8-1796a7b18978", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b06dcbc-e400-49a5-8a21-94f96cbb4757", "sighting_of_ref": "indicator--9fd17af8-e22a-49ae-ae06-dee85337da48", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9df744f1-dc52-47a7-b26c-16896fd9c591", "sighting_of_ref": "indicator--897bb0ff-e3f1-41d8-84f0-05952c6e888f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d853ecc-06c8-49fb-814d-14eb75821db1", "sighting_of_ref": "indicator--0b13e6ae-91df-46f2-8e64-d3f856804583", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f68ee7-6184-476a-b497-1f34ad5f02f0", "sighting_of_ref": "indicator--4884de17-25c4-4252-82ce-e9ed54d258d8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c15dcbea-a7b7-4fec-860a-be7273d1c936", "sighting_of_ref": "indicator--54fa4b7c-ae20-40c4-8b97-64c7176baf61", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9650cb62-8001-43fd-aaa0-d47dee68f20d", "sighting_of_ref": "indicator--c414e866-ab05-4ef8-b7de-6100503a1635", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81550a01-f202-4c45-9dfe-ef41c4349f1d", "sighting_of_ref": "indicator--8816d6d6-e5ce-4aec-ac16-ae73f9ddba87", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ce58f4-45e6-4dd7-91fe-e2faa3e447e5", "sighting_of_ref": "indicator--dcd89bbc-a118-4d25-9df0-1193faf576b2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0cd2f26-2ad4-4ab6-bb77-03f5c1ea6664", "sighting_of_ref": "indicator--affc35a1-f2ce-452d-bcfc-5b85b1fa9bfc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b5ac3c-13a2-4f55-8a90-27c3704a43fc", "sighting_of_ref": "indicator--00c60cc6-4cb4-4c02-a11a-c35b1abd57f4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e684d9fd-2fc6-477a-9e1a-31e8ba01598c", "sighting_of_ref": "indicator--425b8384-2593-490c-93d4-11af669c49f6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c72f1b-423b-43a3-8585-a5b89c9257b5", "sighting_of_ref": "indicator--6d5535d0-412e-46af-8014-75ca9c042d85", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a36c444-d36e-4516-b24f-98397cf13f69", "sighting_of_ref": "indicator--33a5177f-b149-4a7f-a651-d4c4db0dcf02", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee22add-c869-4fb6-b30a-a8f379bdc965", "sighting_of_ref": "indicator--0efaa3a4-54be-45b1-8f11-038a9d9a10a8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b98cbf3-9c2e-4c39-b8f0-f2c3954e8a54", "sighting_of_ref": "indicator--8a05fd28-0c0d-405e-b9e9-2129583a456f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694eb044-95a5-4b81-9f7a-2f99244080cf", "sighting_of_ref": "indicator--dfe68017-b03c-45ab-9271-038c2ee71b57", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a62d82-af88-4717-8035-a611d325c6a7", "sighting_of_ref": "indicator--e9edccf9-454a-4850-b4e6-a8c0d9ec37c6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0856a2e-3bf9-494e-bcbf-fbf52015caf4", "sighting_of_ref": "indicator--f0a0c04c-f8d1-4927-9c16-06adf2aa0af2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd519f7-bdd0-47ed-96cc-37c33ee36816", "sighting_of_ref": "indicator--db08a446-5031-4c86-9f8f-70dc366a9244", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb14d293-4f9f-46e1-89d4-e4aa543bf1b4", "sighting_of_ref": "indicator--62f8a9fb-a97f-460e-9a12-e990a4d41b6d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc19447-d834-4d15-878b-b107a07de236", "sighting_of_ref": "indicator--16a7713c-5a89-4338-9712-ccf4fcdb0bcc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b177599-6339-494c-be8b-a860479eeaae", "sighting_of_ref": "indicator--be13a59e-e104-426f-b26d-e02c9ef1e179", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17870176-cd78-4ada-9d09-fcc2a2e72cae", "sighting_of_ref": "indicator--24777947-f1a7-4925-a029-3bcd9142468e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab38f0d-c6c2-4eeb-97ad-41e1919ac94c", "sighting_of_ref": "indicator--00f151ad-0050-4e78-ae4f-46ab0996c903", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f77366a9-003f-4a87-a792-210d82be8a5e", "sighting_of_ref": "indicator--2a6881d4-723d-4359-b679-18f384f13287", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c6b303-40d4-4a7b-8da1-a4d34056af87", "sighting_of_ref": "indicator--30dada15-c7a5-4dda-af18-cd5dcdd5bf78", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db6ffa2-d5fa-48a2-98f9-3ffe3d5d5763", "sighting_of_ref": "indicator--72e29afa-ce98-4b36-b3a7-72b8f067cbf7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--478cb294-f54b-44cc-9870-bd91b9762102", "sighting_of_ref": "indicator--4887b643-b445-4e0b-9686-d9e36394f708", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9959775e-33d5-4864-a2fd-2d7d7682317f", "sighting_of_ref": "indicator--70e503fc-88cf-4503-8a74-798df4761b92", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adfad5a5-2104-4499-9f95-fbbdf7b0f912", "sighting_of_ref": "indicator--da8cc407-0017-4569-a120-55bb121ef0dc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61873175-392f-4c4f-83cb-c1acbcf9a980", "sighting_of_ref": "indicator--85e77dcf-c30b-4928-aa26-3bbd20dec025", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af1622a-9d6b-4d55-a7b4-6e7c58c8d3c8", "sighting_of_ref": "indicator--81006fb0-033b-4f5e-97ad-312fe48010cd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0569232b-4e1b-4b01-88a7-00b2e56cf190", "sighting_of_ref": "indicator--b788d459-132b-429a-89e6-b13c66e48c31", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc5692c4-975c-4327-8c2b-efcbc028d702", "sighting_of_ref": "indicator--8f628e94-3d4c-43e0-b53c-e421dd4f4ba1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f41d5dfb-a36c-4b4b-ae37-16e19264bb1d", "sighting_of_ref": "indicator--ac9c89da-d426-4451-98b4-a63b152ddcff", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0053988-e067-4b7b-88c4-bba973a0eb87", "sighting_of_ref": "indicator--cdbd6cd6-487d-4cc1-aefa-140e8d1a7b36", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5c8bdb-b229-4a3a-b569-6c53d560fe52", "sighting_of_ref": "indicator--45ef0067-9e7e-44cd-9144-86c17c9a8d58", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7200589e-1794-49d0-baf5-ca1a2c75b83e", "sighting_of_ref": "indicator--38a01aac-c1ff-4b75-9300-eaf2bd15d731", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e87e892-b8d9-40bc-9d87-8127439b5c28", "sighting_of_ref": "indicator--427b26bb-0364-4910-86ea-8a9a3b27cfb4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c55834-94b5-4b2e-a820-d49f0d6c1322", "sighting_of_ref": "indicator--427b26bb-0364-4910-86ea-8a9a3b27cfb4", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de14fdbe-2f19-4d89-91a5-1abf309ab8b2", "sighting_of_ref": "indicator--03bbe58c-2e85-460d-a66f-93fff7058e66", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5640f117-7e0b-4e78-9d22-fe6ae907864c", "sighting_of_ref": "indicator--dbca0fcb-6008-48eb-bd63-ad697ec53ea5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e50d91-f74c-414a-b27b-3525f2b4df3d", "sighting_of_ref": "indicator--391113c8-9e0d-4476-b037-5c6b49075eea", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2f0423-68cc-450b-a366-7bb035efbe5c", "sighting_of_ref": "indicator--ac052d92-9788-4e57-9b5b-c8023854ddb0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b3db293-7a5a-4c2c-ade7-86a6c681d01e", "sighting_of_ref": "indicator--1bcabc1c-487f-45eb-b3e9-77ac8b7498c1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--562a86cf-6980-4317-a98b-5805b6ccda6b", "sighting_of_ref": "indicator--452d8d69-b5a2-404c-9323-0ad72aaa4806", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5fe09ae-8103-4501-bc23-e714fd43a37e", "sighting_of_ref": "indicator--6d60b306-6652-411d-b8b0-1915de912c27", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c571c117-ad91-453e-a4e6-d78e496a1dbd", "sighting_of_ref": "indicator--8dc4b06a-fa96-4691-a95a-fbb50efbcde2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f5f594-e0db-4ee8-89ae-a0dd655e65d9", "sighting_of_ref": "indicator--ba59ffb4-65cc-4c3d-a14b-1c012f384603", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b440001-e88e-4c74-82ca-7bf3ebc2d671", "sighting_of_ref": "indicator--9a533d18-5943-423d-9b4b-4ff12d9374bd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e999dc3-a425-46bc-9915-efdfeb22b72b", "sighting_of_ref": "indicator--14382912-43ea-447d-ae53-bd5eeea2168e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--911448be-7189-4bbe-9fc4-d49b7da9cad5", "sighting_of_ref": "indicator--b6086292-03cb-42b0-a039-21d5ecafc48e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d65c250-58b6-4f36-8a1e-bcaa38a85753", "sighting_of_ref": "indicator--b3f6d186-c89d-4847-a00d-3bb7927ca3db", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be4cd58-13d2-4b88-adc6-d7f387624869", "sighting_of_ref": "indicator--adbc6fa8-5558-4a1d-8164-465d42beafd0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e734f78a-abd0-49d4-8da2-8db7ebba6957", "sighting_of_ref": "indicator--4f2f9e68-847e-4b23-afb1-c83a1484e493", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ffaec6c-87f2-400d-b737-1fb66dd4fb2d", "sighting_of_ref": "indicator--8024be39-d547-4a69-87d6-70cc0596e0c3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fdc4365-c2d6-4643-a2d0-58c2b3021e61", "sighting_of_ref": "indicator--d51f171c-a2fb-460a-9b5a-dac54e85ba02", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1822f17a-401b-4838-804c-dde6cc19abe9", "sighting_of_ref": "indicator--6caf0360-936d-4aed-b218-fa8cbe7dd65f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f8c50d7-ad54-4b3a-8d0e-4695c2e25df2", "sighting_of_ref": "indicator--9922df3f-e720-419e-92c7-3457faba0e1f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--254cfaa8-1b1d-483a-8dd8-3f0813e4cc90", "sighting_of_ref": "indicator--8dbeade9-3953-4364-8f2b-2c72b449e59e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde532ee-d7c6-4f70-8101-2c0a61a9f307", "sighting_of_ref": "indicator--582d783a-333a-419b-a415-dd84db489081", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e75a56-d055-4f1a-a9c0-4b65a9501651", "sighting_of_ref": "indicator--6925a67c-32fe-49da-8e25-4140ceef20f1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c091e23b-3073-495d-85ac-edf8a4f081e0", "sighting_of_ref": "indicator--e1b77841-908f-4a01-8384-4aa331e2228f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487b8a74-8645-4c62-9545-3dd20f1a036b", "sighting_of_ref": "indicator--51d60b38-e455-4e23-a1d3-7fe6b9599b09", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e960a421-7587-4473-87a4-f396b5e32441", "sighting_of_ref": "indicator--ffb279d0-3aed-4aec-98f6-3acf09a27beb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f453d2-ee79-4a8f-9ae5-4d150f8e4209", "sighting_of_ref": "indicator--6a59388f-af38-4fc2-84da-0c81cee31b70", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03847a44-04e3-4cec-be04-a3e6440b65a9", "sighting_of_ref": "indicator--8aef08c7-4e20-4bef-89c6-db1206907eb1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec74271-f2aa-4ed6-8f0a-5a4cc481e77f", "sighting_of_ref": "indicator--232b36fe-3335-43d7-ae92-61e3af2a6b57", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d976be77-9cce-4f27-8c64-33de8e4cc8f4", "sighting_of_ref": "indicator--cbe155df-f0ad-4bc5-b5fc-ee7827961bcf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b64642e0-628a-4a76-9b7f-14fdd633ba54", "sighting_of_ref": "indicator--d76ba9ce-d45b-4369-8037-3158335b6f48", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--716a6255-435a-49f9-a849-51d9aceaeb0d", "sighting_of_ref": "indicator--096f4b39-2671-4f3e-b585-fa0229439921", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488e7ebe-158d-40f1-b3fc-973cf0d175eb", "sighting_of_ref": "indicator--596dee35-456d-4a00-b3ca-2195e6411dab", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3230780-0698-455d-8153-8f380c2ffa08", "sighting_of_ref": "indicator--66a117df-5fb8-4afe-80e0-77106553f870", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c12e2da6-68de-4b39-8441-dab0670205a1", "sighting_of_ref": "indicator--193c6286-e5ff-4b6a-a3e6-bcccfeded36d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe303ab-203f-40e4-9d8f-cdfa68e3581f", "sighting_of_ref": "indicator--9fe5512d-d27e-4ffe-ba5d-d9d8a6f37d5c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39944be4-b73b-4b29-a6af-f9486d615e91", "sighting_of_ref": "indicator--deda3810-d466-4861-b489-61266625ab4c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ecc8ac-70e9-4a55-9c61-9a7b8cc0e2a1", "sighting_of_ref": "indicator--f49d819e-06d0-4785-b648-58e21d1599c0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2767d912-c464-4699-b316-ed767e97f8b9", "sighting_of_ref": "indicator--0ba373ce-56cd-4369-8e45-46b32bc2d54f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c46562-9831-4491-bc74-6b08cffaf15b", "sighting_of_ref": "indicator--7d650903-3ad7-44c4-925d-58f736f89652", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7db872b-3869-4c3d-aa27-24e8d1a8d0a5", "sighting_of_ref": "indicator--27774c08-e566-45b0-bd69-d8b9d92ce960", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bfadc0d-25be-43b8-9393-d7b5c2540f0f", "sighting_of_ref": "indicator--9882c7e9-8e5a-4941-bd50-c5abc2b3dc43", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24436ef-33a6-45c9-af7d-f2d1287157b2", "sighting_of_ref": "indicator--48e6f5b6-ab24-4e89-b3a2-ed4250ccf459", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--580eb746-1e76-4760-bd39-971693e615c5", "sighting_of_ref": "indicator--67144672-771e-489b-bb4e-cea9222e903b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--178d18eb-a2dd-4c4a-b3f5-c75b5c50ef2b", "sighting_of_ref": "indicator--ba2ea270-f9f0-4368-aa97-3031d36f8e68", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7436f784-37c2-4646-b686-f032fe64af85", "sighting_of_ref": "indicator--057d3d3a-2a15-4fc0-89b4-71b34a75dc27", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f56151-d230-4131-83c1-18151d2ea17c", "sighting_of_ref": "indicator--8ca8ccc0-0a0a-436d-84b0-c5a9135fa94a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0de5c2e-da62-4e49-aabc-e229f27b18c7", "sighting_of_ref": "indicator--11134fa8-9db9-406e-9c7e-eb7419c57d0f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79bff0ec-0761-4b99-b419-9069fee1f736", "sighting_of_ref": "indicator--f02ba7c9-5c36-497d-a0e5-f2bcbad3a151", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f4ae307-face-4dec-867c-a5a6855ae4b2", "sighting_of_ref": "indicator--2017edb4-f598-491f-88c9-509fb834a95a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b8707b-3478-4f4c-a65a-211beb181b47", "sighting_of_ref": "indicator--3b699d0c-e989-4a06-afc0-f5b7fda9a383", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8d49f0-1714-471f-bf22-ab25b1dc5eaf", "sighting_of_ref": "indicator--3bf8b014-b873-4f41-bff1-32bb237a62c1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee96ecb-0541-4c80-898f-065ea120a98f", "sighting_of_ref": "indicator--81dce74b-bd53-4e20-864c-67d8670cc29e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e2560e-bf5d-4f32-8517-f82bf79d2150", "sighting_of_ref": "indicator--77bc5ded-e85b-4c2e-8a00-2a7a679e9645", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da139897-302d-4219-a720-65a596dfe8bd", "sighting_of_ref": "indicator--6d10ee6a-4138-44ff-8640-ad5ae44dba3d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cffacf0-49d2-4856-9578-cfda2e3c1e55", "sighting_of_ref": "indicator--f137e91c-ad2c-4f83-ab2d-d60f79f3a7e3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c731ea8a-a5a0-4c48-a631-2d79e22b1c08", "sighting_of_ref": "indicator--6b01c40e-1afe-465d-b53d-7c592eba1092", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66eda79f-2ae2-4610-b939-ca485c163cef", "sighting_of_ref": "indicator--a69e3be5-5248-4a41-8a2d-516ccfaeeeb2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfaacf08-c842-421f-9889-49d59d76bd83", "sighting_of_ref": "indicator--009188ea-b3b3-4665-8eaa-0be7a5cf872a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b2077ff-f900-4156-a3c1-43467946cff5", "sighting_of_ref": "indicator--8d3c621f-d981-4d45-82c6-28682da712c4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7c89bb-af66-4fb4-a408-39006dd30a62", "sighting_of_ref": "indicator--c0a09375-5d78-4f99-8b81-4910c84bc50c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8443df0e-8ca8-43ce-9d80-aa76506233c8", "sighting_of_ref": "indicator--fc694543-7f49-4e65-8e81-97401324273e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9806a9-d27f-41d9-aabb-1ef3caa250dc", "sighting_of_ref": "indicator--8a0215a6-fe6c-4310-8430-443a5f224f35", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a10fcc22-b901-428e-976e-ea4bd7bc1f45", "sighting_of_ref": "indicator--e48d9d47-1213-4fdf-b16b-aecd7d91f797", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d758e3-4a70-474b-b890-f3608f9ab155", "sighting_of_ref": "indicator--fe5120da-c4ee-4a0d-8609-3fa854c89da7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb68796-766e-4e2c-beca-8251641731a4", "sighting_of_ref": "indicator--1c2cf08b-3f93-4b61-83cb-6509fd8eccbb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--441d25cc-b711-406a-a87c-3a56e2bc1571", "sighting_of_ref": "indicator--7858adfc-f526-4526-acf3-b0b749c7b616", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86968863-fff6-40b1-a8b1-db054e1f3c74", "sighting_of_ref": "indicator--a2035c74-18f9-41f9-af8f-f090e0fe3236", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd0ec9f-bd71-490d-865b-626153b7589a", "sighting_of_ref": "indicator--13c330e7-8341-4e5c-8d69-a246d8ce2597", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b92a76-c228-42d7-a5ed-8091ac147738", "sighting_of_ref": "indicator--7b9c74ee-12dd-4f0b-b375-717b3514868e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--480c2ede-079e-4453-a602-76b0647fe74f", "sighting_of_ref": "indicator--085079e4-60dc-4a59-ae49-af8f9d933e47", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff88e53-4c99-4acd-8cfb-09f1a33814ef", "sighting_of_ref": "indicator--09716bfa-f4f4-409f-ac9e-8d9d4fe8989c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8df9c33-dd51-43af-b9e6-7c2a124ce43f", "sighting_of_ref": "indicator--c3cf083d-14fd-453f-bdff-7d7c5a048465", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--449050d6-f1fb-4bd4-9d7a-7a28d209050d", "sighting_of_ref": "indicator--e2686d06-7124-4671-ac02-c4c479409488", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5709b58d-6ea4-4b37-b1b2-e8c9a3a7e8e1", "sighting_of_ref": "indicator--519f2def-d144-4cea-a08d-db9f61ec94ed", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a103eba-0fd8-4bd5-ae0d-49042c3eb50a", "sighting_of_ref": "indicator--99ded05a-fc3e-492b-a96d-b907d62019cc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b881af-a6df-403f-98c6-f6d38255fbaf", "sighting_of_ref": "indicator--56cb0d3e-01ee-46a5-b986-8485c4875c0e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--271275d2-5f89-433f-9129-e5b5897abf40", "sighting_of_ref": "indicator--1beea0fe-49e1-458c-bac3-ad1e3c09adeb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce00e4e-8133-4c8f-b737-aa0b2359dd87", "sighting_of_ref": "indicator--1beea0fe-49e1-458c-bac3-ad1e3c09adeb", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ce4544-6611-49a4-a3ea-5c3e565a88d6", "sighting_of_ref": "indicator--5608b346-3af8-41fe-8354-cb3cb13a1336", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e80a72-3ae8-418d-9de4-ffa3b575f61f", "sighting_of_ref": "indicator--4bc07efa-965a-48a1-9e28-7154de647914", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0595a0ff-2c1c-411b-9819-b567152c98ba", "sighting_of_ref": "indicator--fba51a92-8c95-48f4-adbb-1dba2c2baf8b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a25496-9259-41fd-a9ae-9a1ca93b1477", "sighting_of_ref": "indicator--9d7e19f2-c95e-4658-bd6a-0d482d637acc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2843434-4309-4538-b97b-5f9fde0003bb", "sighting_of_ref": "indicator--08b66a94-d23d-45ed-ad6f-a61765912852", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f17f0038-8507-4b97-b011-89bbae82f67d", "sighting_of_ref": "indicator--79d0e529-e435-4933-8c27-01c60b71f9eb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03524c7-b511-4973-a25f-d53c148826c4", "sighting_of_ref": "indicator--6f85f067-3750-4fe4-aa23-d060cfbe5c75", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b81333-95a3-4954-b726-8a5eb6f94e3f", "sighting_of_ref": "indicator--7ac41efd-de81-4f66-afa4-f1b25a6bfa81", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad878edc-ef94-4da7-901e-19a8501b2b10", "sighting_of_ref": "indicator--120289ba-acc7-4820-a7c7-94f5c519e65a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7a8903-583c-4272-94f6-b283fd09dd15", "sighting_of_ref": "indicator--6d86f512-92ea-4e7f-9085-ed2b55996348", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef3b25e-68c2-4fc4-bf39-64f01ff22e63", "sighting_of_ref": "indicator--99151679-112f-4896-94fc-84c03a8379fc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec4fd11-0fc2-4744-9c2b-7f1630fc0138", "sighting_of_ref": "indicator--4a7c9f85-3f38-4b8d-81a5-48955b4a8f93", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f7fcc5-b0d3-4f31-8dc3-d197ba12e507", "sighting_of_ref": "indicator--749684ed-5b02-4242-867d-48a778ac3596", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f7ddef-897b-44ca-bbd7-ae87193494df", "sighting_of_ref": "indicator--fb4aee89-a4a0-40be-bd2a-f933fccfec4f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0cb0ab-e5db-485e-8b2f-3ab9ce7bee93", "sighting_of_ref": "indicator--39076caf-36ec-475c-a755-d5d6c9addb7d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a41eb52b-5f22-4e84-9bcd-9b3a73f6269e", "sighting_of_ref": "indicator--ad389412-7030-4890-b582-3d97d73a1a14", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16015add-bbf0-450c-9b3d-4057bde1b7b4", "sighting_of_ref": "indicator--427d8839-a828-4a82-a289-044894cb9b63", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1dda55-551e-43d1-8f07-d87d18ce2b67", "sighting_of_ref": "indicator--4a43321d-9d4a-4647-8060-c9e2010cd496", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7249c4a0-876b-4cd0-9133-6a09688bc451", "sighting_of_ref": "indicator--7f6f015e-d1db-462d-837f-32040bf3177f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9afe6026-647f-4750-8b21-35717ac90428", "sighting_of_ref": "indicator--d755eebe-7838-46f7-a660-9dad6a06cc84", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195dd662-f6e0-4a2b-8012-04b7b5a6a926", "sighting_of_ref": "indicator--04566307-6e85-4161-b079-1ba51ab178ad", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12cf063d-de70-4845-8774-6ad27c6c9560", "sighting_of_ref": "indicator--4d192a04-56e1-46e0-83dc-cd2155c3b750", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65abfa04-8f08-4354-b498-7db22167fe06", "sighting_of_ref": "indicator--85aaa635-62d2-4900-9f5d-5e81cead3e88", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aed80c2a-ad4d-4e0e-8951-f4ef4fc179ae", "sighting_of_ref": "indicator--babbc9bb-1a8a-417b-aca5-7eb142dc0f5f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdcd2497-abfc-4a3c-8576-fb943150fc88", "sighting_of_ref": "indicator--13159dd0-d3b4-46cf-804d-479281f7899f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76180fd-25f8-4901-8ee4-7c77ba074be7", "sighting_of_ref": "indicator--6899ac3c-b2ce-4f53-acdc-a66d8a369ac4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3677904-b67d-4b4f-ae7d-0758adff95c1", "sighting_of_ref": "indicator--ecca35f0-2a22-47de-a15f-18f0d034021d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e2d2ade-5290-49e1-8c8d-cc851e23e0e4", "sighting_of_ref": "indicator--ceb9cfcf-4103-43a8-aa77-7b7830a49d5e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3762483f-ef92-44d1-9ac9-ae242598a231", "sighting_of_ref": "indicator--d18e2019-c285-4e26-8318-fa23229b17e0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73a82f8-1dc2-4c67-a739-b93989575e0d", "sighting_of_ref": "indicator--010d5392-b3cf-4d42-aad6-23a9d0ef32f9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f746198-0fb3-41e8-ae49-8eebc8d19868", "sighting_of_ref": "indicator--9587e3d2-bdd2-4900-bc53-79e60c01896d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac700e2c-d94d-4e99-9b83-0e1e04ab9c1a", "sighting_of_ref": "indicator--c2cefad7-f099-4b7d-aa17-8fabdf0f6515", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed8f50d9-8c29-4f41-aa1d-1f1cf852482c", "sighting_of_ref": "indicator--3e08f766-7e07-4ddf-898d-3c735be1b08a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d994b324-4be6-4fa8-9298-39b60b72318d", "sighting_of_ref": "indicator--e9f33478-0c36-43fd-b1be-7f20919a5159", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d81dacb-9b3f-4bb6-8071-da0ef0a4e3e1", "sighting_of_ref": "indicator--0cbfbe4c-c747-4965-ae48-9e54e05660e6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68198375-080a-402b-b77b-382a871726ac", "sighting_of_ref": "indicator--b6c36aa7-55a1-46aa-a015-7aae8a6c140e", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca93fe1-78e3-4eea-a06d-09be65c1b1c0", "sighting_of_ref": "indicator--012cb7b0-f2e8-4603-ac25-dacbc114ec44", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c10b91-7594-488f-bc60-5bb82eb61417", "sighting_of_ref": "indicator--012cb7b0-f2e8-4603-ac25-dacbc114ec44", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c771f18c-3e99-47ac-bbe0-45733e44fd7a", "sighting_of_ref": "indicator--218aa489-827a-456f-a311-913dfbb87736", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e25af5cc-d48f-4426-abf3-96bb6cb333ce", "sighting_of_ref": "indicator--218aa489-827a-456f-a311-913dfbb87736", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92099d88-4f2d-49bf-9140-3b34b171a413", "sighting_of_ref": "indicator--bb71a375-40a1-4f6e-af83-cfae58850f33", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e3152af-ad54-4116-934f-f5b6d90bf113", "sighting_of_ref": "indicator--bb71a375-40a1-4f6e-af83-cfae58850f33", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a88c93-1eef-42fb-9492-9a4ab7b66293", "sighting_of_ref": "indicator--55c16585-80e9-4252-86bd-e32a476d89c9", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56de8239-ed10-4dbc-b424-30465d913141", "sighting_of_ref": "indicator--55c16585-80e9-4252-86bd-e32a476d89c9", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f894840-b151-49bc-a56a-0a3421efe98c", "sighting_of_ref": "indicator--77c79604-d35f-4b0d-b076-8fd965537adb", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff34efec-3e68-4eda-85ea-21d173e9677f", "sighting_of_ref": "indicator--77c79604-d35f-4b0d-b076-8fd965537adb", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6cfd9ff-755f-4884-a4d4-b21ce51faa06", "sighting_of_ref": "indicator--ba68c51d-7f5c-47db-afd3-0a3ce9adf881", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da25c40-5bc9-408d-acc8-43da0c96ade7", "sighting_of_ref": "indicator--0feae2c3-f05c-413b-8434-d984833ea6c4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c08f5f-cd52-46e3-bc36-deafb15e817f", "sighting_of_ref": "indicator--83ad300b-aae3-420a-9b39-a1f9b083e035", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e5768d-cfbc-49de-b5f4-08bc0d5902e8", "sighting_of_ref": "indicator--d9e6f4f1-3293-4d08-9b35-92e391699470", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e52d7f-49eb-4a02-93ca-c927518210e1", "sighting_of_ref": "indicator--d9e6f4f1-3293-4d08-9b35-92e391699470", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004d4e18-8ead-44b1-9649-acea6f3173e8", "sighting_of_ref": "indicator--27604add-a2a0-44fa-8993-ec062c973f8b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c7e0ce-f01b-4b1a-8326-3468be6ce8b6", "sighting_of_ref": "indicator--23b17d39-e2b9-4912-a090-92192ae931f7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b680321-cf46-4061-b55e-19dd6b4551e7", "sighting_of_ref": "indicator--16248b92-bbc2-490b-9329-c6f49bb3d853", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24d4bce-b612-4790-b1bd-bfd5aade74dc", "sighting_of_ref": "indicator--9714f274-e66f-4c19-a11d-b25d02e2405e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea46948-b949-4319-add2-bba84f6dfb5b", "sighting_of_ref": "indicator--eb26761a-e83d-4c77-b016-2f4547e9113a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f2743e-5cf8-4e9a-835d-17be21543bb6", "sighting_of_ref": "indicator--46231a2e-6bd4-433c-8296-2150116e2e02", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5672b6bc-fd36-4a86-8d52-7af836ee494a", "sighting_of_ref": "indicator--fe70d50a-5efb-480d-8ce3-57ec4b34f132", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb5371d-12bb-41f2-ae37-0bbd18a51b19", "sighting_of_ref": "indicator--d9e02920-cf5f-469f-804c-c0ccc1c805f8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0557b7-7da1-4821-9653-d6a1c10b60a4", "sighting_of_ref": "indicator--0ad1c4cb-7e56-4846-aa83-5edc082f2db8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3261826-24fc-4072-80da-dbcb7cd49232", "sighting_of_ref": "indicator--aa180270-b1da-421b-a825-b6861dfda5a3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b943c2eb-ce02-4f4e-bfdf-c80c8f784f3c", "sighting_of_ref": "indicator--646d20a5-9605-4223-84e4-329dd5c1369f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c767311-7569-4630-b2f9-96333a3d1308", "sighting_of_ref": "indicator--40723ef7-496d-41b1-bfc8-700190ec3abf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7979fd00-66fd-4247-a8bc-a3023845373f", "sighting_of_ref": "indicator--abba72a7-071c-40f4-b224-041013851b3e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--540d569c-9e29-4eba-b7f9-74e1d63d26db", "sighting_of_ref": "indicator--cc0dc748-b26d-467d-9915-c37496f8e9c2", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c376e49a-c580-40f9-ad2c-36490058fbce", "sighting_of_ref": "indicator--6bf1fa3e-e4fc-4045-8147-4c3aea413698", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275b246c-5420-4ab5-b13b-745d9944f6a5", "sighting_of_ref": "indicator--8992e776-169a-45c5-a8db-69675b4b3750", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e187afdd-3a6b-48ad-976d-f740c4379559", "sighting_of_ref": "indicator--0880105b-fb6d-4821-80d7-5de48ed7e2e0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5ca48d-5951-4557-b180-2a639057d11c", "sighting_of_ref": "indicator--64aa3284-6686-40a2-a825-a22366f5c4ef", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a49798-78b7-45ff-b980-f39da0056d86", "sighting_of_ref": "indicator--36397dba-3ba1-4e7b-834b-678a5837a85c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2319509d-c278-4e59-bab8-a9257cbeb8b4", "sighting_of_ref": "indicator--4f17b37e-2412-47ef-bf2d-9ba8e775952b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc38464-eb74-43db-a098-b55b4ac086d6", "sighting_of_ref": "indicator--bcbecc02-dacc-402e-97d1-7fdd5af01771", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--980e5e34-60f5-416b-96ca-6b46885ef327", "sighting_of_ref": "indicator--04aa6549-7fab-4779-94d5-1ef25c5b8f98", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf9fff30-8760-4202-bad4-9d1ef9105f43", "sighting_of_ref": "indicator--04aa6549-7fab-4779-94d5-1ef25c5b8f98", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf3c614-4d0d-431f-a41d-ac25e2fc771b", "sighting_of_ref": "indicator--25658617-a6ef-410d-b63f-274440f45779", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c88f6a0-2be9-45e1-aee6-bfa3f9aa3330", "sighting_of_ref": "indicator--a673a155-1a6f-41f1-93c3-d8982bb012e5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefb2fc3-9999-4f29-a8f7-dcf542d296c2", "sighting_of_ref": "indicator--7f26b5f9-5db4-43cc-8622-d6f832d971cc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76db4284-ca8f-472a-8b9b-26b6d12743a4", "sighting_of_ref": "indicator--4ba59f0c-ffd4-42c2-bed8-322f2059bdc6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b01bdb4-34da-4b67-9ac6-697aafbcac77", "sighting_of_ref": "indicator--f22e63f9-06cc-4a59-84af-e3d8cccad46e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--482ac3b1-f03f-4420-bbad-e356395da150", "sighting_of_ref": "indicator--41f6b114-1ecb-48f0-b077-70d412f8f255", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6feffc7-480b-4690-aab3-59568ea87a81", "sighting_of_ref": "indicator--c8df943d-9e16-4215-b899-8e495eb6c0b0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc6b3f0-9a27-4264-9329-b2f9826ad8ae", "sighting_of_ref": "indicator--848ce1fd-b23b-4a30-b9b1-94ecbb875b4b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2da31a7-459e-40c0-a88a-59112b8f055b", "sighting_of_ref": "indicator--bd2b437a-2b3c-4f15-b350-bd2e2be9abc1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a2512d-383c-43bb-a79b-8a6ddb5a7ce0", "sighting_of_ref": "indicator--92372169-d69e-435a-9e82-6f001ed0af05", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248d5bf6-5335-4adc-b37b-b8f99a8ec5b3", "sighting_of_ref": "indicator--06eb44f2-5ab8-4db4-82a1-d4c69236a2d2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71477796-39c3-4ffb-9803-b45cec66151b", "sighting_of_ref": "indicator--5aeaf044-447e-427f-a51f-ad61e09166c3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee71fb7-eaf7-4a97-8358-e712c5d4bda8", "sighting_of_ref": "indicator--84fe6c7b-55cb-435c-bd0d-7018f7354c8a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966d1321-4872-4e56-924d-934afd1e575f", "sighting_of_ref": "indicator--57234eb5-af7b-4985-b9ac-5383cc37e3aa", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ff809e-0d07-41bc-9e62-cbfe96bd4a59", "sighting_of_ref": "indicator--4f3608d4-0b19-4e05-860a-bd957cb4ea1b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--755ad401-a9c5-4cc4-926d-a17258b02988", "sighting_of_ref": "indicator--604de8b3-7e6e-431c-87b4-cf4e2bc3659f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f0239b6-6fb2-4134-9a61-002f9d5ba81a", "sighting_of_ref": "indicator--b980c7b9-cedb-4156-9da7-65f682dab202", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853346f1-2f79-4fcc-a6cd-676582ddea56", "sighting_of_ref": "indicator--aaa42f1f-071c-4395-8e74-b96ff70787bb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a35ea74-687c-44b5-8245-3dc2de0bcf5e", "sighting_of_ref": "indicator--0238f46b-bc66-44a3-9250-941cc35065d2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd58efc4-1db7-4b17-b4ac-688ea095f34f", "sighting_of_ref": "indicator--5fe85db1-2271-42dd-80a2-31c2e40e6367", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609d14c7-b001-450d-96b9-446ad63f4cb5", "sighting_of_ref": "indicator--b8282131-c85a-4368-b415-b6d1c4315723", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8295619-c929-4681-be51-01c55091f6d5", "sighting_of_ref": "indicator--e9f5d2e9-26aa-4794-92e4-e2379232cbd3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c58eb1f-2816-4574-b721-80fef4a7db4e", "sighting_of_ref": "indicator--bb441e7e-9d6c-4e59-8f9b-794dda1be152", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb7dad2-363e-45a5-bf1b-f131f9b8ab20", "sighting_of_ref": "indicator--75d81bfa-3a4d-4eed-9f17-870f2c23885a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d347e0c-932e-46e7-ab13-a324b4be4fbe", "sighting_of_ref": "indicator--309b01e6-a2e5-47c8-855e-01f90f573823", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac65a63-b10e-4679-b674-d2622dfd2d75", "sighting_of_ref": "indicator--95a31eee-b2bc-4b63-8f8d-22faf1b4a4b3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7505a1da-e72c-46a4-a670-1c6720e449c6", "sighting_of_ref": "indicator--d2328806-b75b-47cb-8c29-33b513c7e257", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65111335-ce23-40aa-a540-e77dfd87c8db", "sighting_of_ref": "indicator--1d726651-8cda-43d6-984b-e525a49fd417", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e0552a0-c805-42a5-806f-337c417595f5", "sighting_of_ref": "indicator--911f3cf5-6061-401e-a751-28b001a9ef06", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc13fbf2-197b-43aa-886f-69d3d1a5f9a8", "sighting_of_ref": "indicator--b9f1f8f0-c98b-4a4a-b1fd-bb2e247950c0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843debd5-d999-4cf8-adc6-9b72159fb939", "sighting_of_ref": "indicator--c651616d-8ac0-4de8-beec-e638e76ef0a7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9feb0e4d-48ee-4702-801f-b6634ed1b671", "sighting_of_ref": "indicator--cca82018-6ceb-497c-91d5-c84198a045c3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e9a9610-c5af-4a48-b27b-3c92f03868ba", "sighting_of_ref": "indicator--c054673b-abd5-4310-af7a-ca8f06e2d4fd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b8b45ac-1d76-4dc5-a9b7-f2dfc9c7761a", "sighting_of_ref": "indicator--c1d80adb-e5c3-452d-a472-3cbfe4f8ccbc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2a1a2a-7632-4da4-ba9f-f958b680c9b8", "sighting_of_ref": "indicator--50d4ba04-6063-4363-bb32-90b72abfae17", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1efdb81-e140-4389-9692-cfe1f26bdc9f", "sighting_of_ref": "indicator--b9934200-54a5-435c-9dcd-4a4880132f50", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfd9f42a-a1ab-497c-83c6-9289862dd1f7", "sighting_of_ref": "indicator--aa612003-2076-43f3-bd16-3875a2968f2f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1432def6-90e4-4356-a18f-20bfb224b770", "sighting_of_ref": "indicator--56cc6784-16f9-4d38-a229-f5b7699ae900", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09da727-3202-4c07-9dae-ea1d9f0e9fc3", "sighting_of_ref": "indicator--41c18440-60a0-4c69-9089-a6fffa54e194", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b8ab93-cbc5-49b6-911e-739d6bfd906c", "sighting_of_ref": "indicator--490432ef-fbaa-4970-9c47-56d5959157da", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29312a65-94c8-4aaa-a896-e83eb1e155ad", "sighting_of_ref": "indicator--23b750da-c94a-4bf5-95b8-e1c9e746020c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eacbc9a-2c73-4158-b450-e6d3ac06d356", "sighting_of_ref": "indicator--e3912647-930c-4b57-97b2-f6b1166405fd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--812e4cbc-85de-4d0f-8dd8-56872a56ebc9", "sighting_of_ref": "indicator--45e7ab35-e690-40a3-87b7-f8ad10da9b75", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0aa0564-52d8-4ee2-8af5-2974e438216d", "sighting_of_ref": "indicator--d4a2a7b0-5379-4109-b238-84a0e372ff6a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee59227-2a68-4d4d-82df-866401c21d6e", "sighting_of_ref": "indicator--31a8b453-b25f-4461-9c79-64af76d60e2a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--720f03ab-df6c-4a66-8548-19f436fef66c", "sighting_of_ref": "indicator--c18b0d8d-befc-4ef0-8224-26adc1f3cc01", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--867fddff-e2e8-4a15-a704-11fb29de170a", "sighting_of_ref": "indicator--6fbff630-0ad1-416e-aa1d-562e30248976", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9152acd-70ae-4490-8ab4-d59a02b1f1bd", "sighting_of_ref": "indicator--4046f980-b351-4be2-a5a5-6e228c26b93d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19dfe389-8cf2-450b-b91d-e6918530d5cd", "sighting_of_ref": "indicator--17c470b5-4751-49ed-ac61-485e38020952", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c5b11a-c95c-4bc4-b14b-9b5835f4409b", "sighting_of_ref": "indicator--de3523f7-70d7-4c5c-b431-c6e5753871b4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c1397f-0553-4841-a2b9-aa627b8760cc", "sighting_of_ref": "indicator--c2f65c2d-a9b1-43bb-a990-cda0b2fc3bcd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e1c702-5866-4d46-9f3d-b9153e44c191", "sighting_of_ref": "indicator--8373560b-bcc6-4918-94a9-3c7df2a5fcd6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d6fb69-0e4c-420e-b22f-6a9facecfc05", "sighting_of_ref": "indicator--100ef1cd-6bd9-4046-b624-53b833f282dc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091b5563-759b-4627-9718-aa53d52e3b27", "sighting_of_ref": "indicator--73c2b50e-8075-4a7a-a443-936577080439", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6554df85-c914-4e5b-9bcd-658834689a10", "sighting_of_ref": "indicator--906e7075-3fc1-4288-894b-4ba84a9e984d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a4a108-7a33-44ce-bc69-5c9ddbdd56fa", "sighting_of_ref": "indicator--532ceff2-f7ba-481c-afad-b76bfd61ab64", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7067176d-b546-4796-99ef-11b94fb2eec9", "sighting_of_ref": "indicator--f810600c-8582-4606-823e-07104f16133a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f570c4-01b4-4a7b-a24a-7afb6b12a764", "sighting_of_ref": "indicator--93e0b231-2d06-45ba-af02-2378e08346a5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b53608b-db66-48df-af2d-62a8e2b08073", "sighting_of_ref": "indicator--cb1e5641-d468-4550-8027-a1fafbacc903", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9781976-9e67-4ffe-b97e-54d6d61275a4", "sighting_of_ref": "indicator--6f195322-c99d-4e61-a6ee-0c5bbcbead1e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90fb8f10-e39a-4436-8c4b-1c48973869d4", "sighting_of_ref": "indicator--45b0dbe3-82c2-4b1e-b322-24c5109450cf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c1a8d9-edff-4c12-9a25-2fd2c386b90b", "sighting_of_ref": "indicator--59cbc70c-8380-4783-aea6-52907f065c67", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0353d662-2ab2-453b-a2fd-83afe2273bfd", "sighting_of_ref": "indicator--3b8ffbb2-1058-4d5e-b58a-310df816dc05", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96256846-d960-4173-bbef-a8481b1152b5", "sighting_of_ref": "indicator--cecf86f5-fa35-4e01-8545-468c12796c72", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24bc356a-23d5-4bc2-a68d-6b4067ccae3c", "sighting_of_ref": "indicator--9f14f5da-f275-4287-b139-3d9bd58cd5a4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f09c5a-cbbc-4104-9486-0947680a5e41", "sighting_of_ref": "indicator--9f14f5da-f275-4287-b139-3d9bd58cd5a4", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b7e1f9-a671-4835-a362-98f04c8513bd", "sighting_of_ref": "indicator--99bbbea1-5371-4e24-a40f-f0654515ba1d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--931f8439-1949-4425-bd94-f7c65b890f3d", "sighting_of_ref": "indicator--0b058562-bbc0-4789-9b6f-c05a50e8384d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec47d2c-a589-4956-8d03-29b17cb21089", "sighting_of_ref": "indicator--9301cae5-aa5d-479a-9b99-f7c46ce766be", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1969e8f-9589-4300-ab53-30162b420052", "sighting_of_ref": "indicator--7a51f92f-6125-4139-aadd-f3b6e9972d09", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab627ef2-3c7a-4eb8-be30-ae7eaa2b8da5", "sighting_of_ref": "indicator--14dafdda-5e7f-4d73-8a99-d7ece4269033", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3436696-90e2-4802-99aa-0bad3e810579", "sighting_of_ref": "indicator--13de5064-6327-4484-9ed2-bf0b09b4d045", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e39ed8-72da-4f10-8032-52a055ef3e2b", "sighting_of_ref": "indicator--ab1a38f9-ea3c-4080-86ff-b5a04cee9d09", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38614218-ab96-4e3c-a004-d6343ee226dc", "sighting_of_ref": "indicator--caf88908-d1a9-454e-aa71-3e1d3011f39e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6af2da4-5f47-40f7-a4d5-d873341a8680", "sighting_of_ref": "indicator--68b0bc6d-1510-43b3-b2d4-abc5da3b9c20", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ddaaef2-c2de-4258-a1f2-9a980aa61faf", "sighting_of_ref": "indicator--457fbef4-0255-4223-a367-902dc725ad54", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bcf5c03-4ea3-41be-a947-ebbc90301719", "sighting_of_ref": "indicator--f915692b-06ae-4ba3-bf08-a9a23dadd4f5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c2264b7-8513-4e03-bebf-7a9c52b097d7", "sighting_of_ref": "indicator--5dbe8be6-4567-4e40-b063-ffe7da629f50", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de5a528-604e-4715-852d-9fa81fde866b", "sighting_of_ref": "indicator--3c5862d7-51f1-40f7-ab6f-d1a71d89dc65", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c481bc93-e178-428d-9e74-7928ef6a92b4", "sighting_of_ref": "indicator--80dba226-1dff-43b5-ab56-62117e9d5d81", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98db7cb5-7862-41ca-9df9-0eb0686ffa6d", "sighting_of_ref": "indicator--077dbae6-af3c-4fde-b141-16112d4b0613", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9603005d-45a9-4096-9cea-f17b77068a11", "sighting_of_ref": "indicator--87e86b05-ffe6-4cd6-a891-d827e4b12d5c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1325f023-7eea-4ebd-bd0e-f7f52cce45a7", "sighting_of_ref": "indicator--0bbcb68a-1bb8-40ba-a634-69cf2395f1c9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d732d9c0-9d0f-4506-88cd-d23e75d07ae7", "sighting_of_ref": "indicator--f9f4ae36-1e33-4ae3-8cbf-aab8f8b49ec3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791f8b88-cdcb-436d-8df3-66f1ae10daa5", "sighting_of_ref": "indicator--2bc17ee6-447f-490d-b84a-13745c893824", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5145f74-5cfc-46ea-baed-a8996c4375f2", "sighting_of_ref": "indicator--a9a95d40-da15-433b-b76c-4e55cece72a6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd49db2-c380-4180-a0f5-5f00cfae1c5d", "sighting_of_ref": "indicator--2d7604b5-95bb-447b-b946-47da81431325", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d24945-2382-478e-85bb-63ab39b1336e", "sighting_of_ref": "indicator--4789e044-004d-4d0f-9ca9-3d3b409ca4b6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa773a81-18d0-42f4-b7d7-d50722be0c22", "sighting_of_ref": "indicator--d54aa247-256e-41fb-948c-c5e0b9381a49", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1fdd3b9-fa89-4f50-8274-3e98e2bfa7f0", "sighting_of_ref": "indicator--262641b0-a8c2-4674-b3e8-2e2902689594", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0f455e-b359-42ae-a2d0-f10db51bbc06", "sighting_of_ref": "indicator--2641a559-5eeb-4683-8e00-7e2217e944ec", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e3a1711-7c22-43eb-900b-5f8490239448", "sighting_of_ref": "indicator--e513bfb5-2012-4f77-8abd-cbea5019b310", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da49b0a-353e-4a31-85ba-06dbf854f62a", "sighting_of_ref": "indicator--a6a1768e-98fd-4999-b2b9-5d5d125e2d03", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac5a4e1b-6cb6-4b48-a126-c7acd5018a7a", "sighting_of_ref": "indicator--e783b0b0-8a29-4b17-ba8f-136c2abbddb9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a1a8db-5195-45bf-a3af-5f27e068db31", "sighting_of_ref": "indicator--99fa45ea-0618-4f59-be00-77d9f034cc31", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c30fbd-e517-43c3-bc09-aa0617065ea3", "sighting_of_ref": "indicator--7f965196-b066-47e0-b14a-3670c8c30af6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c6b4c0-5c23-4054-a210-76871fbc5d0a", "sighting_of_ref": "indicator--7f965196-b066-47e0-b14a-3670c8c30af6", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc555d95-1f30-44ce-88cc-7a8b53318606", "sighting_of_ref": "indicator--b9a4539d-616a-46e8-ab58-327e20d4f2c2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df3920b-a81b-4d10-b17b-d6e053666b5f", "sighting_of_ref": "indicator--0ae0643d-7216-4e5f-80b6-7ce18771beea", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3578d77-e4a1-4e57-8b9d-0f85a970bda2", "sighting_of_ref": "indicator--6d8805d5-3d12-414d-ab45-f2e96df6f74a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6129c8f-6eb9-46cd-87f2-f691d37aa2db", "sighting_of_ref": "indicator--e4117d60-e5b3-4295-822f-87c55baa80de", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a04d4fd-3165-44e9-a853-444fb1b840d2", "sighting_of_ref": "indicator--59d7faea-5290-4511-870e-db30b62fdcf8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9121e5e8-456a-4865-b8ea-9c668b51cc1a", "sighting_of_ref": "indicator--40c9b21d-5758-44a1-a7ff-044acf97c421", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b27076b4-06a0-44e9-9896-7c93748763cc", "sighting_of_ref": "indicator--907e18bd-4407-4ab4-9019-bbc6eaad1c2a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d60f7451-f179-42ca-9ab4-20ff0618b276", "sighting_of_ref": "indicator--ad0e7b9d-a4a6-48e0-bf3b-8cef63daa08c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5cbc39a-1401-4512-888f-0637689a0e07", "sighting_of_ref": "indicator--d34e294a-acdc-4066-b1dc-9f771c2564d2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2760fbec-9d0f-41ef-af96-12ac9e748fa5", "sighting_of_ref": "indicator--d3728271-ee4e-4990-9cec-62173b23eebf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dce78996-9783-418a-b9ad-45229c0b9ce1", "sighting_of_ref": "indicator--dab9cd51-a837-40c3-92d8-886feb7da317", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1120a7b9-1b38-4e84-9951-eff4058df530", "sighting_of_ref": "indicator--f2e80dbb-da8c-48ae-8eaf-92d3031c42f6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21ffafa4-c360-487c-be6f-4df1d558f5c2", "sighting_of_ref": "indicator--5c60f1a4-e8c5-4240-9e41-f9ba8cf29f87", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb22b36e-3e65-4237-8c78-83f7e4961f2e", "sighting_of_ref": "indicator--34fc7c73-5d8c-413f-9e13-969583378e2a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efcb4cfa-6e4e-40c7-9a24-49970cfb1495", "sighting_of_ref": "indicator--20c7b78d-09db-4858-b906-bc610a843743", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9553d26-bfee-4dc4-9117-d773ab8c59b7", "sighting_of_ref": "indicator--94bec081-6681-465c-a739-bac43e4cbd72", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--596a98b9-5db1-4476-90dc-93f065b24124", "sighting_of_ref": "indicator--6a087894-5b9d-45f2-ae7e-43047f21974c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d24e8ee1-8a83-43f2-8f03-c44205b2161d", "sighting_of_ref": "indicator--7042d2c1-ec9b-46a4-bcea-bbe7027ecc8d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff764b9-7772-48f1-9b6f-eb4ea1927e16", "sighting_of_ref": "indicator--35c481f2-ea4d-4a4f-aded-0cc8fcbe3e9c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a16a26-cbd2-4927-9894-72a28937a9bb", "sighting_of_ref": "indicator--760c61c3-56ff-46c7-9135-d7075b489cb7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd52dd4-bb76-4ea1-a479-1a14711fbf19", "sighting_of_ref": "indicator--c7a8e865-143d-4624-bb44-04b12c1b661e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d2ed67-05a3-45d8-87cd-cae8b7414390", "sighting_of_ref": "indicator--5eff04bc-4cd1-402a-ad11-c9ba7dadcc17", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e44f5323-ef5f-44fa-a044-b49bd7d4d2de", "sighting_of_ref": "indicator--c3b7e8a6-1dcc-41f7-841a-999d4f43a275", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc35ac22-1611-4df8-8805-eb6b172bfeef", "sighting_of_ref": "indicator--76e3b66c-a67f-4eaf-bad7-645f96a84cd7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f486d30a-3ce3-4d4b-8828-4e50f211d995", "sighting_of_ref": "indicator--26aa359e-d751-42a3-9973-cdc55e730309", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ce976e-cc79-4196-85ae-23b24d9aacd9", "sighting_of_ref": "indicator--776d83a4-43c3-4a00-897c-22407cb9d022", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--714915cd-c7a1-42d8-bb4a-c109afff1a81", "sighting_of_ref": "indicator--6e3b3203-d532-440e-8102-ae0fe3585877", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1396cd7-dbe8-4357-811e-24cf4dec87f7", "sighting_of_ref": "indicator--34b40360-b7ca-470b-8a26-2382febde773", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--becf811d-7e1b-4b8b-8ca5-80c2bf60d94c", "sighting_of_ref": "indicator--4a58f3f0-7a4d-41e9-8f66-e44339b86cb3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91f3116-7f3a-4e97-aa49-9f5e74c02460", "sighting_of_ref": "indicator--1654d2fd-9ff8-4284-a3e1-d8333e5ff800", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db05a0a-2224-4b76-857c-ea84d960652d", "sighting_of_ref": "indicator--0f05fe9f-6281-4e5f-a2fd-c03a698e664c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e0f6e5-5b43-41f9-9f34-9691661ca118", "sighting_of_ref": "indicator--488fcfa7-1041-4dc4-a721-0d8a0db1c3e4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d72bd98-4650-4f52-b166-71fe3c06b0f8", "sighting_of_ref": "indicator--6ecfd7e2-d3fc-490a-a322-967e8813d4c1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ecc2b0-d1c2-4274-8893-b210fc64d80c", "sighting_of_ref": "indicator--9e49172e-7697-4727-b7e7-bebd02e728eb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a771ca5-172a-4cb9-b9b8-4ff4a8e2f3e8", "sighting_of_ref": "indicator--a058d40e-6e65-4e80-8836-4b872696b18e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c546e37b-2981-46df-90ea-27eeca6b2643", "sighting_of_ref": "indicator--83fec4ce-4bbe-449a-ba8a-a7a87a932923", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2263377-ffb0-4902-a0e6-559a900a1f1a", "sighting_of_ref": "indicator--b8c68d0f-776b-4c5e-88cb-32f497baf6d4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e73d9c4-cd56-48e1-afd0-f815e1672a00", "sighting_of_ref": "indicator--4f8c7f3b-55e4-4617-b3d1-bd86c301b86b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02dbde12-2c75-49c5-8a77-0959ca72ebfa", "sighting_of_ref": "indicator--b7693478-da28-4fad-9a6b-faa272aa4f89", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--367e5b2b-86b2-4cf3-b347-12a0dc5367e4", "sighting_of_ref": "indicator--b4094ab2-806b-4859-98de-f5f7e9e9bba0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dbaa723-e45e-481b-aace-081da47be213", "sighting_of_ref": "indicator--415b9553-79e3-4c8e-bf85-fa5cec00e341", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d525802-94fb-43f7-a29e-f9006108873e", "sighting_of_ref": "indicator--2769e4e3-d272-4d22-8482-478b117184af", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb84ddc-0773-4e9a-aead-e5da3505a435", "sighting_of_ref": "indicator--a62f505b-d9d7-487e-b3f9-ca0321ad14b6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5454a8-696b-461c-86a9-9767eb7a5992", "sighting_of_ref": "indicator--08cf3db6-7e8f-48a1-b3a9-353d90dc9722", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23f763e-75ad-4ba0-86ba-47afc7dda1a3", "sighting_of_ref": "indicator--aba10e3a-eefa-49c4-aa2b-252141d4168e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3197701d-ae5b-400f-8c51-488db1fba397", "sighting_of_ref": "indicator--aba10e3a-eefa-49c4-aa2b-252141d4168e", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d4a595-3fe8-462d-887a-ddc944b37751", "sighting_of_ref": "indicator--182cf6de-ce90-43f8-94f2-7e750ac17243", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f58c9e-2682-4511-a8c7-74c6e2cee7ea", "sighting_of_ref": "indicator--8a37f88d-fa1d-4213-8080-6e1a7000c2b7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb65bb06-6a9c-48fb-93b6-099c3b318c26", "sighting_of_ref": "indicator--db7ab404-b7dc-4983-848b-462e7de5d667", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c06482-b8d0-403d-a1e2-5fd3dea6c2d8", "sighting_of_ref": "indicator--4276f229-260d-4a31-9db2-db695ec8e9a8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e468173-9437-4aee-b0bf-b4f04a86bc0a", "sighting_of_ref": "indicator--83b991f9-e077-435f-b12d-0b25b4634667", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48377322-8165-4fe2-b0d0-b3bc5e9dc961", "sighting_of_ref": "indicator--816f7fda-5ee3-4d11-9310-aea9df8a548d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8036c54c-9570-4e3a-a4dc-336ad96fa3c1", "sighting_of_ref": "indicator--0479d07b-7221-4621-ac1c-c2c1cf4404ee", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db5f5bf9-8a6a-4b3d-b619-f500057b400e", "sighting_of_ref": "indicator--9bfe20cc-946a-41ee-8a2b-c014015ac62d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e69a152-a951-4d70-8d6a-1a0f750bc5b1", "sighting_of_ref": "indicator--6ad50bed-e15a-4737-87b8-3af6bac5bace", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a13aea0-bcf9-4df5-83eb-79ae38770753", "sighting_of_ref": "indicator--67aed092-f00d-44f9-8809-03f7edd2ec4d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6b7189-5600-4df9-ab08-1c0e2e2802cc", "sighting_of_ref": "indicator--b6bf74e5-417a-44f5-a3ff-dfcdc3a457d8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92687140-c83d-4e97-a653-0c5810e8bae2", "sighting_of_ref": "indicator--2794ef33-9403-4d8e-9a8c-d0a357ef805f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a91b7c-be4e-4812-bed5-72c91e809ca3", "sighting_of_ref": "indicator--f1fbb326-1e13-4459-8af3-3fddf2f8b815", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16f2730-11a4-4a88-9880-23955b3bdda7", "sighting_of_ref": "indicator--c66fea0e-e645-4426-b40b-6f8b60b1b08c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fea4abd-70bf-4086-acc7-fabdf5fa60c8", "sighting_of_ref": "indicator--34e93ba3-c48d-4e81-8723-1f2efc397c3d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b3252b-53f9-4f19-888b-edfe77762857", "sighting_of_ref": "indicator--ca13b97f-7c1d-468f-83c2-02bc12cbf9c9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44f93f98-92f0-4047-b661-5f912c40d3be", "sighting_of_ref": "indicator--707e8697-d596-4120-be73-8e3758d6b9ab", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e72fcb9-e773-47aa-8e8f-75163c3e2452", "sighting_of_ref": "indicator--a6cf398d-d9a3-48d7-a778-ff7ed17e7c80", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520ba5d0-74a6-47a1-9fd9-11d1d1dc4be5", "sighting_of_ref": "indicator--820cf60b-c78c-4b5b-a74f-8b60fe651bad", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba57ff79-4abb-493e-9ca2-394f47cfc369", "sighting_of_ref": "indicator--339992a8-0479-41c1-b2b4-afd879b9f781", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe09b712-ae06-44c2-98d5-9411efa57709", "sighting_of_ref": "indicator--5d47a294-98e7-42be-b810-c99aa119a721", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b215ce1-4ec9-411e-a740-e922eb627a73", "sighting_of_ref": "indicator--7dd384b3-b681-4d1a-b070-6aaf344812dd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d673258-a510-4754-bbe9-02aa01eedb73", "sighting_of_ref": "indicator--8286ed20-ba2e-45ed-b070-1aafe8cdf64d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64919377-e037-4bc3-b255-8a509d1d4370", "sighting_of_ref": "indicator--91f67a90-9273-4048-b70b-764c312e0923", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90706771-f51d-4874-a109-38c189283ceb", "sighting_of_ref": "indicator--84ac07c8-af02-426d-a915-2c45614eb64f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a4b454-0e90-4a07-bd48-943ebdc509c8", "sighting_of_ref": "indicator--bd61463e-2ff0-4bff-b32d-bab57b03f177", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7838b9-7c84-412f-a9fc-621758fbd8ff", "sighting_of_ref": "indicator--52b652c9-ee70-409e-af06-c846dab88d47", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e7175f-33e3-4613-9856-cf929a0a55ff", "sighting_of_ref": "indicator--a93df42c-07f3-4a4b-b22e-dff27c786a8b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a68dea3e-7945-42b5-9b26-f0f16a25f125", "sighting_of_ref": "indicator--0b08b5f0-dfdd-40df-b6fe-bd4a36809670", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cecff755-eb4d-479b-9aeb-e491a0684e8c", "sighting_of_ref": "indicator--f72c921c-acc5-4700-be1d-09ef3c77a232", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32895026-ec3e-4ea2-aadb-92844f0569dd", "sighting_of_ref": "indicator--59ecb975-da9a-4aef-ab75-4ac78959c0aa", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e09ef30-23dd-4201-9faf-a65daa34a806", "sighting_of_ref": "indicator--2b8e757d-6d71-4612-bb2d-d255fcedff70", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3957da0b-c04c-4e9a-98fb-9a7b7961fc16", "sighting_of_ref": "indicator--316ecf02-9c59-4c49-86c9-688304226d64", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e752d51a-be10-4422-aab7-b97fd0791994", "sighting_of_ref": "indicator--4efbfedc-fb68-4261-98f6-0f50d602925a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f86d4ee-9945-45da-8946-50e74d00e6f9", "sighting_of_ref": "indicator--594714fb-ac3e-4b2e-9824-81c46d276d82", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--180e2828-0896-4339-b597-5648034b8198", "sighting_of_ref": "indicator--b5856459-ece9-45af-8b05-66d20e0b2de4", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f41431-91bd-4b31-a8fc-0985e93f9d20", "sighting_of_ref": "indicator--0c322da5-2d82-4eba-8734-a867ecbda526", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba53cad-6a52-461e-8a89-db735621e0c1", "sighting_of_ref": "indicator--2988879a-6537-40bd-b445-b71725d2c0a7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ad5ef6-2877-4b8a-9a88-27d4c8710ce1", "sighting_of_ref": "indicator--b29442bb-e1e8-4062-a5b8-b8f39888a75c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5171d22-0838-4fa3-a83b-bba8fb8d9c7b", "sighting_of_ref": "indicator--eabafe49-c788-4d7a-b930-924c7a206080", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa261f9-7ca6-4ecd-94fb-6b5614e054b6", "sighting_of_ref": "indicator--4322f0d5-a601-47f1-9018-f5f3f4d1934c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f762123-29d1-421d-a74e-917ac4ac6b19", "sighting_of_ref": "indicator--37c3289e-ad39-4f45-910a-d03096cf554c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7956cc7d-7c51-45c7-ba82-eb34e02a9149", "sighting_of_ref": "indicator--91264edb-6ca7-4c1f-9e0a-7b816c53cf2d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c11af0d4-b610-448d-af91-cc1260cbe2e4", "sighting_of_ref": "indicator--d60ee7fa-f31a-495a-a710-4aa6a39a7072", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38bb9931-f8ae-4b3d-af66-3723028fd3c6", "sighting_of_ref": "indicator--f0d856c7-f273-49e6-bce0-f82700858e3e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f251e942-cf06-4474-a682-d85896af9f5d", "sighting_of_ref": "indicator--d3973a67-168a-4824-a421-c821e43cca83", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e43c9e9-47c8-4fc1-987f-f8917f87c6db", "sighting_of_ref": "indicator--e16b8447-21a7-4006-9860-613672b41bda", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70388298-8a65-4901-8531-fb1dac680490", "sighting_of_ref": "indicator--eab31f5f-3ec5-442d-b198-80bce6a3edf9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f486b4-b687-4347-9779-3cc3c0edcbc9", "sighting_of_ref": "indicator--afee7505-14fc-4718-9197-baa6447eac7f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f43c94a-9474-4f22-b824-370c5676ee86", "sighting_of_ref": "indicator--a4e371a3-18e7-4394-a1d2-99b2f4c23d48", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171bdc56-c58b-47b2-a057-74872ded8d1f", "sighting_of_ref": "indicator--5af2f438-9064-43eb-8c34-f6322f7f9780", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b51f2dc-3127-44ae-83b2-c6b9bf9dcf2a", "sighting_of_ref": "indicator--98c256c3-de27-4e12-be03-afb7d6d089b5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--219011ad-f48a-461c-b9b4-3d3c4d0a5aaf", "sighting_of_ref": "indicator--422e43f1-3ac6-46ee-b5b3-1f4f45a6f29a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec8bf00d-e2ce-410d-a680-2722df43e000", "sighting_of_ref": "indicator--4e3c17e4-0f1c-4e6d-9eea-d23749ade97b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b21993fd-b689-4ad8-a612-414d8ac61192", "sighting_of_ref": "indicator--874ab25f-af6a-4d96-8a7f-36c70c562da5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0972a405-6ad3-4588-9d13-bb8f9a02e9ba", "sighting_of_ref": "indicator--24bf3c6f-e516-491d-abc3-02e59e92c9f8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357ffef7-ed61-45be-bd7b-22b12bced2da", "sighting_of_ref": "indicator--29d0c549-3caa-47d9-8305-dfd628d8a746", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65efea2-0d7c-448e-a391-715f2684e9d9", "sighting_of_ref": "indicator--580fa7b7-d1bf-4e49-8b3c-ecdfaee795f2", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d34d5a-9cbb-447d-882e-f04168fa55d6", "sighting_of_ref": "indicator--2ea9db93-ff51-4333-a86a-54f3205e3a0d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587bfe9d-0cf4-42a0-948a-9d1fc0b8be03", "sighting_of_ref": "indicator--6232a89e-5007-43d3-84d3-76c8c18adbd8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef0e240-8c88-4fde-87a4-da5bf3514a43", "sighting_of_ref": "indicator--7ac13b02-1165-484c-9830-4d5e9c74d032", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be53242b-f0a1-4b00-9238-01f647bba87d", "sighting_of_ref": "indicator--c5ae07e6-c932-4161-8d2e-a8f12d7eb8a5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93cdf9c7-ef81-4da0-a6bb-11286448a90a", "sighting_of_ref": "indicator--e2f955bf-0ba7-4bbf-95cd-047e82784d99", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723d7120-4324-4592-8237-9069fd245e47", "sighting_of_ref": "indicator--5ff1329b-c5a4-4c28-8cd0-96dc92a76b0d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae42b81e-2c06-4a14-9648-8a00c588a5c9", "sighting_of_ref": "indicator--89dd1beb-2d51-4cf3-8fd5-e720a9174a73", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--774f684e-b0e0-4dda-b6d9-0ad9228e30d4", "sighting_of_ref": "indicator--e92399e6-e3e7-4779-905f-4bcb7e08a844", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5931c50e-523b-472c-ac9b-15d9bf1c2abd", "sighting_of_ref": "indicator--084b5de7-38f2-400c-a84e-2ed550f399ad", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf329e6e-c9dc-495b-92f7-ba48e8217215", "sighting_of_ref": "indicator--fdaf1f08-5045-4c74-bbef-ea79659f81e4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--704784c4-2656-44af-a651-a9c48df13d48", "sighting_of_ref": "indicator--63087c85-7bc2-407b-a971-eed2c8812cad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e35db23-2ecd-48af-83d4-886cd8713f56", "sighting_of_ref": "indicator--73d11f13-7def-4dd7-815a-702c3a384672", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16bd0380-0952-40e2-8824-16d8a34b3ab0", "sighting_of_ref": "indicator--2bacf7b3-c922-4511-a339-92ba7db3def2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73251934-bdb2-430c-9851-54fc1dc6115c", "sighting_of_ref": "indicator--ab245106-8fdd-4d13-b2c2-b40bc322d6a7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8bbe707-a9a0-4619-8738-06e2605ce7c4", "sighting_of_ref": "indicator--496e96af-2601-4135-9899-6e79cdadc86e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c2333a-7718-4093-b1f6-7be86bc0eb2c", "sighting_of_ref": "indicator--e97c6d3f-f8f0-48c0-b50e-809d0236babd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62807654-7558-4ea0-82b4-c33645e5c882", "sighting_of_ref": "indicator--f93026d6-1b41-4fab-be21-db95b6adfc13", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638fe79e-49cb-40a0-b186-64a79b3cfbdf", "sighting_of_ref": "indicator--f9b45d34-16b0-4aee-a61e-f7852fdf8558", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4fd94c2-cc16-484b-9325-a4b044dfa88a", "sighting_of_ref": "indicator--8530c6f0-e262-47c9-a134-aacd1771a8f1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d774a61-3b97-4671-a9b6-756c4efc0441", "sighting_of_ref": "indicator--47feb29b-4315-4eff-908b-f7a5bde7d3fa", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d44e706-4841-4bb6-85cf-9a57fea4fd6a", "sighting_of_ref": "indicator--0bd95bb1-0dc6-4af3-aabf-b2ca0f46514d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d5620a-49b9-45b5-9250-7f86d716116e", "sighting_of_ref": "indicator--bf2819e7-c271-43d6-9ab3-c49ff9ab5964", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c17685-9a93-4012-bedb-a6edc3bff7a4", "sighting_of_ref": "indicator--af291fcd-4f2d-40e6-84a1-a374aae5efed", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbde2cc1-56f7-4951-8d93-e9edf2cb54e9", "sighting_of_ref": "indicator--4ece9079-f12f-4a71-b7c7-d16b56917e8e", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--209bc955-9644-448f-9e9d-b1fe310e45b3", "sighting_of_ref": "indicator--44d57bae-fa98-4230-a70a-41cacb91d196", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0c26a6-0769-482b-943b-257983616596", "sighting_of_ref": "indicator--07681d8a-e702-4d1f-9b06-6a4422a99abb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd58c4b-e550-405b-8355-9e578073ae5f", "sighting_of_ref": "indicator--754b35f6-a640-4d6a-8406-3cd166f6d35c", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ada4f4-da69-4a63-a4f5-c56259321fa8", "sighting_of_ref": "indicator--5e2f892c-561d-4653-821e-150f5a3d1df2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c8bcf9-9ab5-46b3-8738-b33ac9f7abbb", "sighting_of_ref": "indicator--916ac6ed-561f-40db-9477-8129422cf6ec", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab028c11-1850-40da-8110-34cf9ad291f3", "sighting_of_ref": "indicator--3b96e689-82e7-4354-81b8-056dfe71ceec", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27420ba7-f192-487c-ba70-7a8dbcc7a0c4", "sighting_of_ref": "indicator--bf55d128-636e-49eb-9f81-7c0fb62f3493", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f20777a-3174-4073-bc67-7ceafc1582c0", "sighting_of_ref": "indicator--ad3afb49-e50f-49a2-b6d6-3c93168d0d46", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ecf64b-39d9-4184-a7c0-df5abb78047a", "sighting_of_ref": "indicator--7919e1e0-f53b-4fd6-a429-e16dd421efe6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b7aeef-29b8-4fc4-8c04-f8d8f83c089d", "sighting_of_ref": "indicator--5f80de76-8ee2-431c-bd51-d6c1b72d9de7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e662c15d-3d22-4e72-b2dc-68647fd2773a", "sighting_of_ref": "indicator--4324aee8-0605-41ad-b7b5-d24923577ffe", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff4f71b-e139-4b27-865e-f40a99329f19", "sighting_of_ref": "indicator--0718f8d2-eed2-4f2f-95b4-2dd3ee59a979", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d81f898d-e13e-4fec-9cf8-1d028dd1b0b7", "sighting_of_ref": "indicator--b38064a4-1a30-4c32-bf9b-0c1aeb364e37", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45158576-e114-450c-abea-1bb4a2dadf87", "sighting_of_ref": "indicator--0493f81b-8690-46a2-84fd-b5ef3d149f5b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f136d5d-a71b-4bb2-be27-19c62fd2a13f", "sighting_of_ref": "indicator--2511592d-6641-4e06-9d0a-50993f29346e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7946b1-689c-46ef-936d-1fa82bfcadb7", "sighting_of_ref": "indicator--64b7902f-9190-4fdf-9624-2102faf3c5ec", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a707924f-f01b-49c9-8b47-39d3bf99ffff", "sighting_of_ref": "indicator--8816c7d1-7fb8-410d-97d9-e92633b07760", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9448df95-130e-43f8-9839-a12d66a1fb1c", "sighting_of_ref": "indicator--b7e6a777-92f2-4466-a485-5f75f8289ee7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34494b2d-c9b8-4eee-bc44-fe81c08bd842", "sighting_of_ref": "indicator--b032ff4d-1e73-4c4c-ab5a-6583850a6f06", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d1c729-742c-4343-8e51-15dfc1ef608e", "sighting_of_ref": "indicator--4ec663e2-f0d3-462f-b423-dffe97f4e507", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0952fc81-7529-49a7-8c23-78085db089ec", "sighting_of_ref": "indicator--5818ff2d-c744-415c-b42b-5537ddb5e0c5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fcae4a1-224c-4682-8c9e-71b72c7076e2", "sighting_of_ref": "indicator--ce515181-a3c1-4e75-8eb2-dc84c4ef354f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f749cc3-0ee4-4ab5-a58b-c8bcb6e7b4b8", "sighting_of_ref": "indicator--66b26d3c-71e2-4f78-af62-23101880d680", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58096e0-abb2-4bcc-bd70-abecd9e5736b", "sighting_of_ref": "indicator--58402a34-eed2-42a1-833a-47693345bc27", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa912f9-2e23-4fba-9058-36b83ef75a74", "sighting_of_ref": "indicator--d0d48a10-5ad1-40b3-9800-f4d92de0f5aa", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--798580e4-a21e-4793-9cdc-ca86f14085ac", "sighting_of_ref": "indicator--f17876ab-5311-4cff-934b-5e94d9495b89", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12fa107e-99b6-4316-945c-1a82be19e81b", "sighting_of_ref": "indicator--22090fc4-a8ec-4505-be94-efcd8bdaf018", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b84bd6b5-7788-4f30-873e-5dbd19b7676e", "sighting_of_ref": "indicator--81d73d99-b633-490d-86ca-5fc3afe1ba03", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d278c4b-2abd-4809-9a86-d944d837bdbd", "sighting_of_ref": "indicator--1827807a-0eb7-4a33-a2d0-b4575b6ed4d0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f650ede-4662-433f-926e-5d9620589f90", "sighting_of_ref": "indicator--7b896c6b-c874-49be-a220-21a1cb975e81", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--499ad61d-8580-4c87-babe-392b902238a4", "sighting_of_ref": "indicator--cea7c87c-3623-4cb9-b2e2-0d131b63e2e5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4431ff25-a0ce-4684-bf01-9df8e040fce6", "sighting_of_ref": "indicator--7167c1cd-f2a8-4f8e-9a0b-ffa3be6c1615", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db6c7914-dc32-41c6-88aa-2ed2973a3237", "sighting_of_ref": "indicator--33858d07-7b90-439f-a36e-1c9bb41bdd6f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b09d5f4c-a6ef-4213-8ff7-699e636d7612", "sighting_of_ref": "indicator--810bb2b5-2f13-4906-a08b-547d8ffa85f8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e4ee1e-7e8f-4ceb-bdbb-6ee564125898", "sighting_of_ref": "indicator--bc204e11-4255-4927-83b7-3d1b407064c9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--980d0910-0ddc-4727-a794-bb75fe85d83c", "sighting_of_ref": "indicator--54e8880e-f37f-4bc8-ab17-d0e246f106e2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6be3af8-b973-485a-93c8-b2f319fc2f82", "sighting_of_ref": "indicator--8a835206-b654-4f25-a437-a730e698c566", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3607e02-53b2-4729-bc30-9ef35342d7b3", "sighting_of_ref": "indicator--946394c2-210b-44a5-bdb3-90cd95c6a5b2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593fd70e-6be8-49dd-81c9-0f48c41d0245", "sighting_of_ref": "indicator--73e65390-3b03-4204-8e68-cd1223b11362", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be50092e-fce5-4d1b-87c6-c151dbcb2e7e", "sighting_of_ref": "indicator--8ecea995-69ab-4325-819a-e5d9ed8a87e6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be795ce-cd1f-482a-9784-886eb37f9586", "sighting_of_ref": "indicator--2ee4c835-1d3d-4929-b048-87a6d042a99b", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0dc3c98-29c9-41a0-953b-b90cab10fd18", "sighting_of_ref": "indicator--fe7daa26-1943-4451-a4ec-53f7c2d7d803", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef561218-ebf4-488e-99d7-e29bdb514cb1", "sighting_of_ref": "indicator--33bf77d0-fa20-4e37-b314-013e57c53f0e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a7f0b5-1fc8-46de-807d-7c2917b63f1f", "sighting_of_ref": "indicator--b0c9803b-a171-452c-984e-97aff8944f94", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab9e285-9e04-455c-a963-6cae2a71fbc8", "sighting_of_ref": "indicator--93841a99-58f0-43f1-8c19-484689394676", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99aa7cc5-4a6c-4aa8-bbaf-2db134d9be96", "sighting_of_ref": "indicator--14994b5f-3d28-43ac-aa22-729ed412c90b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a785c0-16c0-4f18-a9ee-9a723cf1d20e", "sighting_of_ref": "indicator--abe34764-c133-41eb-a427-22669822e674", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a90e8f68-5515-4f45-b8f6-7a870b574eb0", "sighting_of_ref": "indicator--c4c8eb06-96e6-4f18-ac61-9bed787f89dd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fef0538-5172-4583-8f49-7dce777bb2e8", "sighting_of_ref": "indicator--46e3138e-d879-480a-9cac-75635c15d383", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b5bd7b-6a13-4246-be5c-473c4b583963", "sighting_of_ref": "indicator--9b8eeac8-01c4-455a-a3df-fdd3b15ea782", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fce42a9-b1fb-4598-8979-15e09c6fcd27", "sighting_of_ref": "indicator--8efe78f6-dff1-4ca8-91d2-edaa52f22e21", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b7192f9-565b-48df-99cf-3275f375c5ab", "sighting_of_ref": "indicator--9f633293-bfcb-467b-87a8-adf6a45d10c1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3b6c12-ea64-44cd-b752-91aed9c7f701", "sighting_of_ref": "indicator--4f8548ef-8e7d-4ddb-9d95-cac5a77093c0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ca6537-1300-4c5c-ab88-a5bbd2b17565", "sighting_of_ref": "indicator--554ab020-16f6-4c2e-9d8a-465d973abed0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535d5c8c-91d5-42d7-b122-eba938ad2367", "sighting_of_ref": "indicator--4774443b-62a8-49de-8b04-188a654b6aa4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd419856-cad7-4517-90b2-9946ad925f10", "sighting_of_ref": "indicator--4555d9e6-bf78-4f95-9428-b2ef9254ea69", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bffbab10-5d21-46a4-8f92-c4e7af859f6c", "sighting_of_ref": "indicator--e98460cc-4c26-4449-bac6-dc05e7fc77b8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c44936-93cc-4449-bd84-3b1d7bb02d14", "sighting_of_ref": "indicator--3361bd21-2179-494a-9091-6546c88ec399", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db80ebbc-e2a6-432d-ab46-d02949327a94", "sighting_of_ref": "indicator--bd90a579-3489-4b28-a0c6-e7e096afe302", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26930223-7911-4be3-85d6-b42a261142ae", "sighting_of_ref": "indicator--5ba8efb0-9f8f-449a-8d9e-7673ebb75911", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e9f4b82-5f18-44bf-8cc7-afcf44fcd16c", "sighting_of_ref": "indicator--732c23ee-e987-405e-b09d-3d9757c41540", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31cc485d-62ed-4477-9685-7c358a5a6a2e", "sighting_of_ref": "indicator--13d5b7da-7429-4498-8264-a33936dcb461", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae710bc-b2a4-48b7-b15f-505e6312d827", "sighting_of_ref": "indicator--4041713c-d7af-4fd6-b8f6-92070304ce17", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f1c8e0-d938-434e-84fb-5c02586ae093", "sighting_of_ref": "indicator--8088dd0b-56fa-4dfe-aa77-5490cf88f17a", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--090d5e0c-3fba-4156-852b-ee47c66a3631", "sighting_of_ref": "indicator--7491118c-daec-43bb-b939-271bf42065b2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a4ed11-4f5b-4789-9eec-ec4fd338dd71", "sighting_of_ref": "indicator--8fa0d076-ca1c-4666-8133-70965d7507af", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b95d1e-abe9-47b6-a951-6dd7c57d069e", "sighting_of_ref": "indicator--8300c20d-8f1e-4dfa-83bf-caae02e82885", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82774063-7141-4ddf-aa32-a0b5c1d536ba", "sighting_of_ref": "indicator--3826d0b7-89c5-4d51-a26c-0ec256ae9f9a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5257b527-9227-40c6-a3fc-80565e93c661", "sighting_of_ref": "indicator--159ea749-a0b2-45fc-8faf-b71cd0fb4cab", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd14f74-e83f-49fa-845c-e5d4f12d5b35", "sighting_of_ref": "indicator--213c3811-ad73-4f79-b59c-746d3aa63906", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513eb5dc-37be-4458-910c-f65382a2e0c7", "sighting_of_ref": "indicator--5b6b1ce6-41c0-4a81-a50b-34935c8cf520", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59cead58-6a68-4487-88ad-572eb3646712", "sighting_of_ref": "indicator--2134bb36-0a18-44b0-952a-aa624094f764", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab2edfe2-575e-4eb6-a32f-0e42a3942d43", "sighting_of_ref": "indicator--a4368cf9-eafb-4346-aa77-56d6cb2745d8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e6b611-9a30-4e22-9b47-d4af05ab8435", "sighting_of_ref": "indicator--715de4f3-de51-44ac-b809-7305a1df1809", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec1c088a-3589-4a8a-a718-4b1753b0aca2", "sighting_of_ref": "indicator--c82e297a-762d-4de3-a6a9-c6d0aba32e29", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c1b5af-7f56-4731-afe5-e26f3aa6982b", "sighting_of_ref": "indicator--a565fc48-b384-425c-bc37-bdec6a5e5814", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b56f5a-16d1-43e9-b0b1-3da86b35c292", "sighting_of_ref": "indicator--a95221fa-07d0-4507-9c54-be5fede6945a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d2c7955-7dd3-4212-bec6-cb786faf686a", "sighting_of_ref": "indicator--ea773ca3-81e8-482c-9d6c-313b7335a1d2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2fe6bed-616b-481c-9fd4-4ae6fff20438", "sighting_of_ref": "indicator--7b867ef1-0216-4708-ad33-7991c4378bdd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46354b05-b53b-4f9e-8804-4a0534dc424d", "sighting_of_ref": "indicator--30b39ea2-f8b9-4f7a-9eb4-6e830e3f27a2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f5a4da-6ecd-4e67-9584-4b6993a5600e", "sighting_of_ref": "indicator--a748e5e0-00ef-4c96-bcec-cdd2030036e1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba0c2630-3417-40bf-b38a-7324f92bdfe0", "sighting_of_ref": "indicator--44eea1b0-1884-455e-9235-fbb64383a10d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5cf81f-7a29-4cc9-b1af-926d5f897166", "sighting_of_ref": "indicator--e6bb286b-30aa-4df0-bd95-c44a952475e3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b680eb7a-7e56-4115-9c9a-6107df95b514", "sighting_of_ref": "indicator--636db9ae-fa2c-40ca-b2c0-cfb721b0b61d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59299c8-bad4-4f10-b569-5fd5c02f28b5", "sighting_of_ref": "indicator--61d4ba2c-0b67-4b3c-83f0-938af97e72f1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7115fc26-a9b9-4d59-80f3-800db10404a3", "sighting_of_ref": "indicator--c5fb16b0-a3fa-4b78-8b82-881c565d23e0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--671b4fe6-edc9-44ee-9721-c63374f5f406", "sighting_of_ref": "indicator--516fbcd7-7e7a-4151-b520-b3053c60985a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c35e37-be2a-4d9f-8da7-d2fff5de36e8", "sighting_of_ref": "indicator--c84989bf-e5be-4097-a92d-9524ac2b26d1", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f343d6b-4a2f-448f-8d57-5822c8c3dfeb", "sighting_of_ref": "indicator--785aebdb-907d-428f-8b5e-2202dd08a9ab", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc38d002-fa45-4eda-b50d-bfa2f854e122", "sighting_of_ref": "indicator--e61eca77-106a-40a1-85f6-5cdfdda57b9c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79827b95-3dc9-4c6b-9efa-8a9653e1e142", "sighting_of_ref": "indicator--87eb7431-7584-4e4d-9fe9-d24023c4a459", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebb367d-d0c4-4775-8384-3a65d633490e", "sighting_of_ref": "indicator--3e9f08fc-607c-479f-9f91-73da486d897b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a085ea-ac61-4395-86aa-8c5306315e7c", "sighting_of_ref": "indicator--1caaf0c9-ca3a-48a8-8f0b-617a12d24f4b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b30e09-4c41-4ba8-82c2-3727b9594d46", "sighting_of_ref": "indicator--4d5b87ba-1a74-49f8-8a32-598382364afc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c3db198-8fe6-4d2d-ba4e-e2090fd5ac3c", "sighting_of_ref": "indicator--0d875ae1-076e-43ca-94c4-ff4835cf6aa3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa4ca41-91ea-42b2-be69-d2a787b09d62", "sighting_of_ref": "indicator--893b6c5e-ccf0-409e-a711-04d1b554fb2d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368a126c-b5a5-4613-8e5f-477cac31d418", "sighting_of_ref": "indicator--26aeecc6-8975-4b73-8519-117cfc02f2bb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b441a55a-c264-48cc-a96f-23df617a31cf", "sighting_of_ref": "indicator--2cac610a-57ab-4dce-b499-e304641e4c51", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b98257b2-dd53-4ee1-8f8c-722b0bc778e5", "sighting_of_ref": "indicator--06ba6e5a-10bb-4f21-99f4-71dcb6ab9fa6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6ea911-d644-4242-8f52-96dfdbfd611e", "sighting_of_ref": "indicator--d9a556f4-6b51-4659-9fcc-e1f1256ff397", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6303246-8805-4d87-8bfb-0ed0afa86fd4", "sighting_of_ref": "indicator--eede5d8f-5320-442d-8dcd-c0ed12ca327e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef1b2d9-dffd-4fdd-b066-ff02cd5f704e", "sighting_of_ref": "indicator--200639cb-9f16-4ab4-b7dc-0363b13cc3dc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4067bef-8017-428a-af3d-21055280f0e3", "sighting_of_ref": "indicator--e4f11a1f-20e8-4f1b-b57b-e8578cc266ff", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01262db9-f0e5-48c6-b5e9-fab7b8de8b5a", "sighting_of_ref": "indicator--ce737349-2eeb-4c28-b063-63cc68858f50", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a47539-30c2-4886-ae5f-e74c055375e9", "sighting_of_ref": "indicator--ba945bfd-a39c-4ec5-a1ca-582c236ebe18", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a903e20-7862-4a43-afdc-6a0ed7729326", "sighting_of_ref": "indicator--3b751f5a-8aff-4716-b11e-90e785400ae0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ef5919-82bd-4e79-b362-189cd2e9c5dc", "sighting_of_ref": "indicator--d4031315-7b70-4aa9-9b22-cae721283b6a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c37452d-f6d4-4e6d-8218-fcefa4e1b60d", "sighting_of_ref": "indicator--abaff418-5af6-4f76-a2ae-965e52193912", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2f3932-aa10-4d59-8fb6-8cb3e32154bc", "sighting_of_ref": "indicator--4339961b-f197-4b28-9269-7a425f4064af", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be66f48-b949-4178-af52-02ce6ed1daa1", "sighting_of_ref": "indicator--f81987b0-e5de-447e-bdaa-49f26d6c7bde", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa23d356-d871-4822-886c-b998d428ab4d", "sighting_of_ref": "indicator--d0eb57ad-8898-4e26-a36c-4e91ef6ecd27", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5d989b-cad2-41d5-b972-8d6d09ff515a", "sighting_of_ref": "indicator--da6475f4-ea1a-4ca1-b842-043a94b9aa78", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98ac63f-76cb-4601-bd97-547314ae93ed", "sighting_of_ref": "indicator--09f82dd0-f33e-4a4f-b673-df2d1585a773", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a2c9521-5790-421e-bd5f-ee7dee87315e", "sighting_of_ref": "indicator--c8554fa6-0201-4b53-801d-a3d99250d7ed", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f731affa-be49-4f02-be70-030af625f94b", "sighting_of_ref": "indicator--59f07aad-6705-4cf8-b219-81cae7cc1b65", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d4d9643-5ff3-495f-8984-449581eb8bc1", "sighting_of_ref": "indicator--d132fbbd-7b44-4e3b-8c62-ea7a01e79270", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd214eb-ddd8-42f3-9dcc-f9553e3aa9e1", "sighting_of_ref": "indicator--114759a7-522c-43ca-87d4-a8fa2c4b28f1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeeb33fa-676e-4d90-b368-1851af2a062b", "sighting_of_ref": "indicator--567ae933-cbfd-4ca5-9604-988691af9b15", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e09bfe9-c548-469c-a407-8c0cfcdc450d", "sighting_of_ref": "indicator--97a663f0-6cfe-4bd0-abcd-eb82fe700fa5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4cabbdb-b680-400b-af97-45d4b71f91c1", "sighting_of_ref": "indicator--7295f3d3-37db-49e7-bd1a-3de3da47187a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4effe259-cdc8-47b9-a823-78167d7712a6", "sighting_of_ref": "indicator--34623866-7d4c-47b4-b0ed-579fc01f276c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d11b8e-8a77-43a3-b6cb-28eed70557c3", "sighting_of_ref": "indicator--b7d690b1-81d3-4a75-90e3-2e4750996373", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d915463f-12ba-4435-8d39-80b3157c7586", "sighting_of_ref": "indicator--b7d690b1-81d3-4a75-90e3-2e4750996373", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b85af1-d2a9-4595-a8e0-a179aae949b5", "sighting_of_ref": "indicator--96b778d5-f754-41f4-a9a6-685084692b0e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f00c5fe9-bd7e-4082-bdb5-9de0bdbb19aa", "sighting_of_ref": "indicator--96b778d5-f754-41f4-a9a6-685084692b0e", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1cdcbe-b16e-4bcb-a990-f6262a36eae4", "sighting_of_ref": "indicator--96b778d5-f754-41f4-a9a6-685084692b0e", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3877cb26-bb6e-4ea2-a652-8e3073177951", "sighting_of_ref": "indicator--0d26723a-02a6-45ec-ba67-678951a99ea7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35402479-610c-432e-a374-d9783d0f5067", "sighting_of_ref": "indicator--0d26723a-02a6-45ec-ba67-678951a99ea7", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a158cb0-7d21-4e0a-8ed7-44cceaa2a5fc", "sighting_of_ref": "indicator--e01ae635-23ba-49c6-9189-11c30d25a932", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--333e259e-5963-4599-9dc4-4d9232a5362d", "sighting_of_ref": "indicator--e01ae635-23ba-49c6-9189-11c30d25a932", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0739caa-cc0e-4dce-a562-2d9fe1a40b4c", "sighting_of_ref": "indicator--e01ae635-23ba-49c6-9189-11c30d25a932", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c93493f-124a-4409-afa2-e8fe325d2bb2", "sighting_of_ref": "indicator--323f62fe-5677-441e-b05f-a2386a2e7c43", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a14c83fe-3aed-4c3f-afb5-19851416d8d4", "sighting_of_ref": "indicator--d4783039-7102-41e0-8a19-41421d34ccda", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f083c565-dbd7-408d-ab6b-227b891dee05", "sighting_of_ref": "indicator--1d93aebf-e9b7-4563-9f5b-1a1effa6a04e", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33da0e31-8529-4f71-83c6-0567e175d1e3", "sighting_of_ref": "indicator--1d93aebf-e9b7-4563-9f5b-1a1effa6a04e", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6035f642-03a0-4677-aeb4-5e608d4b718a", "sighting_of_ref": "indicator--c9de9c13-0dfa-488d-bb11-1ca96b484fa7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8149c697-07dc-47d2-a0e8-552cd2ff001a", "sighting_of_ref": "indicator--c9de9c13-0dfa-488d-bb11-1ca96b484fa7", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf9f4745-e08c-430b-92fe-4f779c3b659c", "sighting_of_ref": "indicator--4363c600-406c-4c28-8f64-e38fa2f079f5", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5919913-76dc-45f5-8e26-de1c3906ad87", "sighting_of_ref": "indicator--d1b0e19e-d86e-4d1a-9c10-19901d58e2e9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26467c50-75af-483c-a825-d9ed43519aaa", "sighting_of_ref": "indicator--d1b0e19e-d86e-4d1a-9c10-19901d58e2e9", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc549ec1-3380-43e9-bd37-7d6ff99034cb", "sighting_of_ref": "indicator--f047db9b-b299-4632-8f60-89ccd4cfd622", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2507deba-433a-4253-bada-3dbf7805b8ec", "sighting_of_ref": "indicator--35f264b0-ad6b-4c09-b39c-903d617f6e3d", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b9d625-e22d-4a18-9372-248e81909002", "sighting_of_ref": "indicator--35f264b0-ad6b-4c09-b39c-903d617f6e3d", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946e1b27-f6d1-47d9-9578-8ead380781df", "sighting_of_ref": "indicator--35f264b0-ad6b-4c09-b39c-903d617f6e3d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c069f98-20f7-4987-9edf-b041b2f75d6a", "sighting_of_ref": "indicator--35f264b0-ad6b-4c09-b39c-903d617f6e3d", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd6f97e-de17-463a-a337-ac42233a7406", "sighting_of_ref": "indicator--aced4c95-8b09-4774-87e2-8b8db89d3dff", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431b8dfe-fa39-4136-8979-792481ffd86d", "sighting_of_ref": "indicator--aced4c95-8b09-4774-87e2-8b8db89d3dff", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b1869e-3b04-48dd-8999-42dc9b4a9553", "sighting_of_ref": "indicator--aced4c95-8b09-4774-87e2-8b8db89d3dff", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd0be0b-fe9c-487b-8131-ff7ef71c0e0b", "sighting_of_ref": "indicator--aced4c95-8b09-4774-87e2-8b8db89d3dff", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee77ec8-de0c-4356-a7e2-4e7141d6d1d7", "sighting_of_ref": "indicator--2fa23acb-e64e-463b-99f2-ab142eabc5b1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--754b5b09-0bed-43a5-9ae1-28a9df18691d", "sighting_of_ref": "indicator--1f8a32b4-1924-43a2-a0bf-6b069d00b0b0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a8d3362-61d0-4d00-a13d-be2dc7493389", "sighting_of_ref": "indicator--9f069fd0-1ca8-43b6-9898-5ecb54e3d058", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f2d12a4-6648-4488-9bbd-c9ee24629f94", "sighting_of_ref": "indicator--102b5f8d-a407-4574-86b0-a9acc53c346d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5406d7d6-16cf-45bf-a73b-4737d7860c19", "sighting_of_ref": "indicator--21ed2d9d-8876-472a-8e97-781315aed64e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c049add-f8dd-4122-a523-3687e294db7f", "sighting_of_ref": "indicator--7e5b2051-f1ad-435e-bb27-f6dc2f5e53bd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11566d6a-ac45-443b-93ac-6cb8fe4bb835", "sighting_of_ref": "indicator--00c894b2-38a5-4835-9216-ea01952495c8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a25907f6-e64c-41b1-808b-2dd0ef717bb9", "sighting_of_ref": "indicator--524e3879-a246-4663-9b94-b7ecbb759b24", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be378a19-dfb2-4b82-b3ef-f37d5f311844", "sighting_of_ref": "indicator--e4078697-51be-4a91-aec0-c16f4931ab4c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa58d03a-007e-4cfb-8796-8da72f5bbafa", "sighting_of_ref": "indicator--82aed898-e057-44fc-baa4-77acfea7c0d9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4a5e449-d236-4dcd-84a9-7088eb896d8c", "sighting_of_ref": "indicator--c1f6acd9-46eb-4cd2-9838-3c13fcb79f68", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9178d765-36e0-4888-8a15-0204e9e5b922", "sighting_of_ref": "indicator--89ebfdc2-c86e-4fa9-8a9f-d80e074f90ed", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405d3d44-32c5-428b-8b61-5f9169967dd8", "sighting_of_ref": "indicator--a74b017f-9fa4-49c3-8eaf-fbb3d9353b5e", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1511e744-fe8c-4add-ba18-542c17282ac3", "sighting_of_ref": "indicator--aab41133-1b74-4f50-8f71-725625e09253", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74c01f6-7a68-491f-baad-603ceffb004a", "sighting_of_ref": "indicator--5accfb3b-9e24-40f1-a676-0533d8a6024c", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39fa8187-8ecc-4c16-8bb8-e7b304f83c43", "sighting_of_ref": "indicator--f8028cc7-c7e0-41ea-931c-3053fbcef5c2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9666eb8e-fbba-4cad-8fc4-99afb54a7c5c", "sighting_of_ref": "indicator--acc17857-d235-41b4-b476-e577541a611e", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0781b284-53aa-4795-8dd6-ed90cc79a15b", "sighting_of_ref": "indicator--b119f9ba-a705-4f58-9115-0a88c9c7d2f7", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e6b7f2-b238-4045-811f-42b2a091e39b", "sighting_of_ref": "indicator--96f06586-2a1b-4eb7-bb72-5f3c494768c2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83bf741b-abb0-46f0-a643-5779dd864c40", "sighting_of_ref": "indicator--6fb2bb47-70d3-4a00-b5a9-f4f04c1bebd6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21681529-b664-458a-adf8-a834fb4f0024", "sighting_of_ref": "indicator--5dcc1d4a-a40a-4007-968b-6aa61fdf6e27", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d65435c0-b153-4b82-989b-dfd4f303482e", "sighting_of_ref": "indicator--a3cf003c-b9d4-4fb9-aff1-d06c2b2ee20b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46293d4a-d23f-4284-a94a-d66e64bb69a3", "sighting_of_ref": "indicator--4df90911-1e22-4eda-8cf5-e2ba76dfa5d9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87bafe3b-acf6-493d-ac55-e0a16d11030e", "sighting_of_ref": "indicator--c663b7f7-7eaf-4097-8ffd-a692a70e8973", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5def566-2025-43ad-b654-8e69867c380c", "sighting_of_ref": "indicator--a0be1e93-fcab-4dd9-804c-1abfe48a1ad9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92de2009-c2b7-4e79-ad80-0352f2e77950", "sighting_of_ref": "indicator--b838e44c-9210-458f-b5e0-69511655247c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56323a6c-06cd-4f2d-a3d0-7266e3c40f04", "sighting_of_ref": "indicator--dd2e6e69-79db-4e87-bb6a-a05879ee5f53", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c88d52f-cf73-41d1-ac13-41fc95525d6f", "sighting_of_ref": "indicator--e2a88fb6-1a37-43f0-8835-e2ea9a27a9f1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f4c1cb-ff0f-459a-a98a-e0fed6005da9", "sighting_of_ref": "indicator--a562a5e0-eb26-4385-8771-0d9c7e7fde42", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--582a2adc-6e14-46d3-8e66-dc2ae2ae13f1", "sighting_of_ref": "indicator--5a4b0f92-981c-4ac4-ad45-61cdc7243f91", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4551110-be4f-42e2-9173-7ba82562584f", "sighting_of_ref": "indicator--f1b16d87-710b-400c-80c2-07530f013b22", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ca5b24-c20c-4887-8ad2-8907a2473bff", "sighting_of_ref": "indicator--a74e56b3-8dbc-479c-b3c9-91bac96d742b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc5a490a-5ee9-4577-b2f1-153b1be8c319", "sighting_of_ref": "indicator--c21f2b4c-c717-4bc4-8786-366cba3d8044", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b149ae-3d17-45b5-96dd-b52b17b61018", "sighting_of_ref": "indicator--36664c42-7481-4b28-9b51-c9e7ad68a844", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96210228-aa97-4d85-91ff-d4452cd15616", "sighting_of_ref": "indicator--92a7dd18-fdd0-4ff3-a53b-492347afe4cf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cff8bd6-0247-4429-b172-56edb1e53107", "sighting_of_ref": "indicator--f03cd95a-2587-4606-8f6a-637e2c6ffe71", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8c14e2-d6b3-42bc-818e-1b6a3663761e", "sighting_of_ref": "indicator--8cd91d89-1a14-4b0c-869d-8a6c0768360d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a790bc20-58e6-4af4-a276-b8d7bfc51379", "sighting_of_ref": "indicator--a3482a69-eb17-4dac-9659-569453536d37", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627cee4b-38c1-41a7-a6aa-2203db18f9b3", "sighting_of_ref": "indicator--01eb939a-8cda-4163-9dfe-438e654d2135", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f932f866-b7ba-43f5-b890-513ba402d368", "sighting_of_ref": "indicator--fce51053-498c-495b-a9bf-720917cce60a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574c1fe4-b4da-4a50-afc1-c028b6ba3d3f", "sighting_of_ref": "indicator--5e53861e-5e74-4c3b-877c-736f04c8f664", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e1a0e5d-eb74-46cd-b180-201265988646", "sighting_of_ref": "indicator--b4c0cc6f-f00f-470f-8fb5-13320f6545e2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a6f9ad-db7b-4323-b86c-bf4009889c40", "sighting_of_ref": "indicator--1ea1edfd-08d7-470d-8aea-562a1c947082", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1660175c-1cc3-4839-95b3-333ccb6d1f00", "sighting_of_ref": "indicator--08859b46-d601-4b89-b407-5c4ab10208b2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--200bf5fc-9b6c-44a8-8154-c1ab16a5504d", "sighting_of_ref": "indicator--de37fde0-a06e-4c40-b22f-3b86450a7cb6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31877acb-cfd3-472c-9d4b-a6f671051e2d", "sighting_of_ref": "indicator--cafc3e60-427e-4c95-a0c8-e9a067532a50", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f88ba83c-b7c5-4e50-bb79-78342f9127c9", "sighting_of_ref": "indicator--274c6873-ee9c-487d-ac70-010438fc9fad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e88a742d-cea1-41eb-a2ee-c7fb71041f45", "sighting_of_ref": "indicator--40dff23d-c84f-425d-8c3c-a9f8fa89473c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab6dda30-866a-46ab-849c-5a997d75419a", "sighting_of_ref": "indicator--de33d204-11a5-442a-9a25-666b025062be", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0785fc2-5026-4b33-8195-eb5b372852b5", "sighting_of_ref": "indicator--bf9bd86a-218f-4181-abab-d5a8cc20b905", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bff554b-4a85-482f-9628-6d9598dfe7a5", "sighting_of_ref": "indicator--4a78526a-0791-4896-a7d4-88735314bcbc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--016a5d0f-8b2e-4865-a37a-8f7e993c466e", "sighting_of_ref": "indicator--7698c69c-dc66-4e62-83e6-4d6720eef221", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a154b3f-d185-410e-98a0-89f79deba7fa", "sighting_of_ref": "indicator--29f2550e-c0da-417a-bf02-f15854ea6487", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16cbf112-55d7-4dbd-9f9e-b13f31e40ac8", "sighting_of_ref": "indicator--8a6f71be-8bd3-4fbc-89db-6303d9f24fe6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd382322-645a-4bb8-9874-1253b1df27f8", "sighting_of_ref": "indicator--828b3efb-0848-4f82-8dbe-623d9a2749d9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--505cff93-71f7-415d-b55b-af1e9ab9634a", "sighting_of_ref": "indicator--df41852d-a3da-4817-97e8-61c8a2ea2947", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ef44ac-bac5-48a1-9e8b-7da1814bc987", "sighting_of_ref": "indicator--3f25b36b-23de-4bf3-b779-4202594b43be", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d756bd5-e858-45b1-87e7-77eaaf6a52df", "sighting_of_ref": "indicator--5e580b4d-fdd4-493e-897d-a678f69820f0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc743c11-28ba-481a-abe2-280f857fac21", "sighting_of_ref": "indicator--b3f391e6-46a0-43bb-a004-44d0395bd6fa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd1ad4c8-6bb8-486a-af25-9e9044830af5", "sighting_of_ref": "indicator--98937c80-d5bd-42b5-83f3-236eb27033ee", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45b73966-9288-404d-9ffd-943a204c1078", "sighting_of_ref": "indicator--21e88480-ff78-4b36-897d-c4c4122de236", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bed458b-deeb-4e1d-a2b9-ca654ed8d39a", "sighting_of_ref": "indicator--3a137c88-89e1-4d9c-ae55-0ed9879ae83b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e869fc-87c4-43b9-8bb0-09f6595d4f2c", "sighting_of_ref": "indicator--3a137c88-89e1-4d9c-ae55-0ed9879ae83b", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd0f4a7-e860-4db4-a8d4-fea645aec443", "sighting_of_ref": "indicator--edaa30b3-8ad4-47c3-8c40-4cc10d41698f", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e58dff-bbe7-415d-bafb-483930869744", "sighting_of_ref": "indicator--87ae345b-f471-4fe5-be78-89d63b2eb95d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9326e98f-88ba-4839-bfec-b332ea0491a0", "sighting_of_ref": "indicator--ec69a98b-5de3-4be5-89eb-1a935a5630c8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df6f9c0c-26b0-4a1c-9152-829fbc190924", "sighting_of_ref": "indicator--c84944f1-1b28-44d1-a4f8-bc7df7a12791", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ebd4596-d81f-4b91-8cd4-7afe9b259b28", "sighting_of_ref": "indicator--00a84691-665b-44a4-a474-ab6bec13afda", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c90c3c-1b55-40a8-862c-dec9ca622228", "sighting_of_ref": "indicator--e1f5b8b8-cab5-49eb-b03e-0f20bc522525", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2269d06b-8af8-498f-84b3-ac6f5510c83c", "sighting_of_ref": "indicator--265db731-e840-47e7-8030-35226edae49c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1e1e22-b739-44f5-b9da-a299e0c1c617", "sighting_of_ref": "indicator--054d381a-ddee-4293-ae3c-2f7b101a1a89", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f719255-062c-403f-a71f-48299e08b76b", "sighting_of_ref": "indicator--8d62e016-5001-4772-9358-52e5c0ff17de", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6892eb3e-c00b-4e70-a702-104ece19afa6", "sighting_of_ref": "indicator--1f936ba3-2e7b-4428-9510-621344e899f1", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9e90d8-2b51-4bb0-a72b-da58e4957afe", "sighting_of_ref": "indicator--8115b1e0-f4f8-4709-ae5c-e25f1d4d75a2", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec68ed3-47f5-4adc-b951-60f0172a0e53", "sighting_of_ref": "indicator--572e1abb-2e1a-4b67-a4d9-16d2f72e75d4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa92033-0015-4f1e-9e2d-aaac38335b22", "sighting_of_ref": "indicator--ab87950e-9146-4493-8142-c39013133e6d", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--211497bb-a0ef-4ed1-a96a-0e5ffeb347fe", "sighting_of_ref": "indicator--5001a3a1-ea29-4cbc-b446-7435f0d88ef7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ac5a27-d551-4c81-9e39-7fbc4273f659", "sighting_of_ref": "indicator--8c7ca4f1-c65b-4580-99d1-84f1fbc8d8ff", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e0237d-dbd3-4587-a103-d8ab362487a4", "sighting_of_ref": "indicator--5e9f581f-ef60-4451-9758-c639859242a4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c42a5e-ce82-46e1-a00c-96397e4ebb65", "sighting_of_ref": "indicator--59612326-4cb0-4bf5-908d-5b3e04f42681", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74fbb56a-11e0-4e7c-9958-d79f70b0daf0", "sighting_of_ref": "indicator--774cad05-6d22-4416-abfa-2851cd7b4378", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15d7fc6-2ea2-4a99-b53f-2e7344f064d2", "sighting_of_ref": "indicator--0e1a37dc-1e58-43e9-bbaf-2b398e03f5ec", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c18a66-1f6a-466f-99a1-db6825d31f30", "sighting_of_ref": "indicator--8dea3b11-e743-4ec3-b3ea-0f2b42ede6bd", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c16993e-4e83-4f85-8219-63b5726a344a", "sighting_of_ref": "indicator--b4b183ba-59ef-4d37-8989-76147a5bc9eb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356e08cd-e75a-4deb-ad5f-08003dd684c9", "sighting_of_ref": "indicator--0b75243a-41f8-4db7-a693-37ee71817a7e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7da1218-c567-4376-9f3e-5baaeb9d72ab", "sighting_of_ref": "indicator--bb7f44f9-d50b-4501-a576-d3278e628b95", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff38d16c-fdf4-4994-a14b-63dd70e2e7de", "sighting_of_ref": "indicator--a81be5bc-2eb7-4e89-916d-69628495c8cf", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--669a15d6-eaf6-46ed-8e36-2726ddb989c0", "sighting_of_ref": "indicator--a81be5bc-2eb7-4e89-916d-69628495c8cf", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bce7f36-8095-49d6-aba6-3a57a0fae14d", "sighting_of_ref": "indicator--8cb45b0f-9c9a-48d7-ad04-83179761177b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97510d7e-807a-4594-840e-045237ac7b28", "sighting_of_ref": "indicator--c72ad128-828d-405c-8595-e4030b8a64c1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa52e7dd-7aae-4cd8-97e4-35d76cab2ae9", "sighting_of_ref": "indicator--d3c8962f-8f8e-432c-9fdb-5fd98b450d72", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb3e1e1-4293-4d40-bc05-0720d149dd18", "sighting_of_ref": "indicator--ea3e76e1-3d57-49f8-b4e1-362a34c8ef73", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329f786b-1a3c-452e-bc77-ae5b5ff9d305", "sighting_of_ref": "indicator--cdcb050e-5939-40a4-b555-0bf87be502bc", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ba4dbe-911e-4674-b7c4-8cde706a7533", "sighting_of_ref": "indicator--e3c4b781-f78b-4db9-a7d7-9f4d9fa15f7d", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38594793-eab4-42fc-b846-26ad0c33c6f0", "sighting_of_ref": "indicator--bc8e1ac7-5f45-462c-a243-0375b3721718", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d1e4a4a-7bee-48e9-a86a-ddb3b4ec3bd9", "sighting_of_ref": "indicator--84ea6a18-e295-415d-8497-d21ae90db258", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9dd24dd-f143-4567-8497-6554ba8aaa15", "sighting_of_ref": "indicator--6a9bb228-ad25-4ae3-8a0e-a2ebedb15c15", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c0a420-cd4d-4380-9c2d-7d35b2e3df8c", "sighting_of_ref": "indicator--68712f6d-5b5c-48c1-a95c-77a596a7c3fd", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b9d390-9252-4dce-8abd-17d42cb1de98", "sighting_of_ref": "indicator--5f8624fd-bf39-4203-95c7-eab5cdb1c413", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1db559-0bc4-405e-85ec-2dba8262c2c9", "sighting_of_ref": "indicator--188baf34-0a44-4313-a33d-cfad5b04ef8a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a2aff6-158c-4ce7-abdb-ddc015ad4671", "sighting_of_ref": "indicator--b8526d6b-6333-4360-b4c6-af3d4dde56a6", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366d7a10-601a-4b68-a677-02cb8bfc2d16", "sighting_of_ref": "indicator--b8526d6b-6333-4360-b4c6-af3d4dde56a6", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a7cbf54-6d19-4e2a-9c3a-eeac56fb67e4", "sighting_of_ref": "indicator--1368bb03-cfd9-45ac-b73e-41fec4c0ac02", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8ba76a-34a2-4729-b9f3-ac5838a60c24", "sighting_of_ref": "indicator--72ced406-e573-4527-b7b4-676db742e2df", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e12f9310-89bc-496f-b760-07773019048d", "sighting_of_ref": "indicator--ce8d9c3c-48c5-46cb-a273-c990f5405082", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aeb5523-3587-49a7-9919-4aa34406d8eb", "sighting_of_ref": "indicator--1026a1e3-f1cc-4fc4-8a40-06dbd9aea2f2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1176310-d1d3-4f99-9623-57a12ad779c4", "sighting_of_ref": "indicator--c30a260f-9b05-43f0-aa21-71f3230edd09", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f7ee8f-3ac6-4c1b-9ccb-ca8c3ed3a6b1", "sighting_of_ref": "indicator--c8bf753a-4111-4c6a-b61f-320f21733dce", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22fb4694-efeb-4943-929b-b409f02eca55", "sighting_of_ref": "indicator--80eda782-6b9c-4f6f-a2b9-d71295598298", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2bafa6a-4676-486a-b5d1-6c234efac42f", "sighting_of_ref": "indicator--5a65a102-65c4-46cf-922f-dc199a47d215", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a287153-448c-4326-88dc-6821175ec854", "sighting_of_ref": "indicator--e637dac7-63dd-417e-8b24-077b9edae957", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce4027f-e63f-4fb7-a6da-f239d2a8706d", "sighting_of_ref": "indicator--a3ecb07d-2389-4ba0-9477-eeddf7dc3c8f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--381ef198-73e3-4cc5-bb05-edddb7dfc318", "sighting_of_ref": "indicator--de60a03a-3304-4bdd-9bae-11fae79b9274", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e293299-e1ae-40e2-9f17-7a96eb021ffe", "sighting_of_ref": "indicator--a4fdeee5-e2a3-448f-b678-3df1a7cf75b2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c74c2e-219c-4691-ab07-6a8602534e4c", "sighting_of_ref": "indicator--8d7011e9-acdd-4693-90b1-4b676f1d4293", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405583fa-1355-42c6-86e1-3b9ba19b3fba", "sighting_of_ref": "indicator--c6be6450-aeb0-4a89-9cfe-8288f59e59eb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2810ba-974d-478b-8514-520ae07c312c", "sighting_of_ref": "indicator--396d2c4d-dee5-4a73-b0a5-9ceaacf72ff4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d86d2147-5a04-49d7-8bd0-30c4485369e0", "sighting_of_ref": "indicator--66e8172f-9563-43ba-8769-a224e5f55ecb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0c3885-e61f-446c-91af-f10f68796796", "sighting_of_ref": "indicator--323239a7-0652-4298-9c72-d77505bdec3a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a97e5fba-899a-45e7-b176-ddc224ba3611", "sighting_of_ref": "indicator--de1ba001-52d1-4ea6-a0fc-8fbb69028e6f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecbaf8b6-dd3f-4b82-b9dc-5655a59886c0", "sighting_of_ref": "indicator--74a597b6-4348-452c-8021-5024dfd9c39e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5838be1-28e6-4a24-a9d5-161e2e1b2fd5", "sighting_of_ref": "indicator--6f1e2a9a-607f-4eb1-8b13-0f24ef82caa0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b59672-0bf1-425b-9889-4a855f2ab67f", "sighting_of_ref": "indicator--136b221f-e9dd-490b-a7e3-0a01eef94fba", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b35b55-d16f-41f3-a2a8-7e878ebf419e", "sighting_of_ref": "indicator--01eb40b8-54b8-4274-b798-6ffe97c33937", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab16f7dc-b5a6-4afc-80e6-1e676418c63f", "sighting_of_ref": "indicator--f5952503-aebf-4306-af54-3a549a6eeb4f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11c9d71-ade7-466d-8187-03740bc5f499", "sighting_of_ref": "indicator--225d36c9-87e3-43f2-8b1f-dd56a2f04afa", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--051703d7-3a3e-43c2-9ec5-20917cb12b22", "sighting_of_ref": "indicator--1451f0b9-9e39-4f4e-b7b3-d3f092ed8401", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e643b8c9-cc89-4b21-9332-e46061d88c44", "sighting_of_ref": "indicator--0db8ba04-086a-49c3-83cf-675bc1a988c5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--012a33c3-3666-4845-9f21-fe110c43c3d3", "sighting_of_ref": "indicator--fc033b07-d6f2-4d73-bb3a-b84c37fd7e6e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a34c9b8-b9d6-45d7-aa12-b0832833e5dd", "sighting_of_ref": "indicator--d21d3455-2da7-4600-b603-d45bf13dcd56", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc234398-49aa-4a4b-b71a-f29e3c6b73e8", "sighting_of_ref": "indicator--44f075cd-c446-4881-b8c7-0121282c6b6f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88bf295-1a7a-4230-9772-3f587d0f2c27", "sighting_of_ref": "indicator--9750a601-4e3c-4420-a743-755d3ef7157f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13278565-d9f5-44f8-adeb-3de5092b8cff", "sighting_of_ref": "indicator--a7a7be0d-458c-4640-a086-275375482b2e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c1df52-b268-4d2f-8d21-79107cdf646b", "sighting_of_ref": "indicator--bda3082f-07c0-4543-8dc5-6e1d024aad0e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--550010e9-bb81-4bb3-ae72-7f9ce036de7e", "sighting_of_ref": "indicator--b1f48578-544b-4fe1-8e09-6deb4e619c37", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99851a6d-c9ed-418f-a30d-2c4c252c7006", "sighting_of_ref": "indicator--5cf774ce-bc2f-441f-a4d0-0c7ede23e993", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f571440-0d86-4490-8548-543b6abbf995", "sighting_of_ref": "indicator--44392686-232f-4a7b-a3dc-a97c2e14d992", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a09a632f-c491-4146-a2d8-8c74482ffde8", "sighting_of_ref": "indicator--72d2ef67-ee4c-4ce1-9075-af27552ddb64", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65e8f4d-5246-4fb9-889e-40c43a5cadc7", "sighting_of_ref": "indicator--c8349d29-808a-4551-945e-6dedaf526c7e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5359e4f-e6cd-47dd-8ab5-8cf27abd7d88", "sighting_of_ref": "indicator--430f4a2c-9428-48fe-868d-d98dcb2b46aa", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95284f4f-043a-42ec-aaf3-52dd64698a7d", "sighting_of_ref": "indicator--018c7e9f-63e4-4a72-92d5-2e3264542072", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d817e7-44cf-4f2e-99eb-6018f2581b96", "sighting_of_ref": "indicator--e65dc796-68eb-40aa-ba87-237ddb79bc87", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f6ba5d-d7a9-4e33-b827-81c629f99ab4", "sighting_of_ref": "indicator--4291cc6a-43de-4392-b673-6e461e274dbb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e5ec0a-0787-4a4c-8988-cdb250ab891d", "sighting_of_ref": "indicator--9ddc46b7-e9c4-4c11-a5ec-89f622a04096", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53693054-9a1e-434a-a740-d67b2ae9001a", "sighting_of_ref": "indicator--aadd31fd-0063-4293-b71f-ecf487150c7f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881b8b3e-e8f5-4724-acbf-6b3ef5248f1b", "sighting_of_ref": "indicator--b75ff646-8ba2-4bb8-bc5f-fea7f1b48a7b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f940d7-5c57-4300-b64e-dba9bb9e2fac", "sighting_of_ref": "indicator--58c82d58-f7f9-4137-8467-632aab6fcd1a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e2baf22-9dc9-4f14-8f49-65ad475e8406", "sighting_of_ref": "indicator--0f1e0e71-b3da-499f-bdfe-be7f34299593", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d78834b9-74a0-4c16-8dfc-8ece3a66149c", "sighting_of_ref": "indicator--a6f2d8a7-6d08-43d4-849f-c57d3176fe0f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccda7eaa-3616-4ba3-aca3-7ffd8f96ddec", "sighting_of_ref": "indicator--c30a7864-b333-4dc0-9fa4-2d5c915e1cbc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5014eb9a-d9d1-4dda-8956-43daabbc5ba1", "sighting_of_ref": "indicator--2178b025-28e9-4d38-95a8-75888455b3cd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4ba008-586d-4084-9410-280593eab6c7", "sighting_of_ref": "indicator--309858d0-a73d-4bb1-bc8b-7bed1b7f0f00", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c84f16a-b8d9-42da-bdab-b4b2d394d29e", "sighting_of_ref": "indicator--a1c70519-adf0-4708-b338-0f44e1d93c97", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd4dd1f-45e1-4dde-a9a0-2234f9a4663f", "sighting_of_ref": "indicator--245559e0-40ff-427c-a085-be12b39b6520", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1e8ae9-e752-4124-a256-ffcb844ffdc7", "sighting_of_ref": "indicator--f6d1f6ae-aa80-4871-bf12-8262aaf404b7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6054198-90ea-4d03-af8a-dacbda3c40ad", "sighting_of_ref": "indicator--3b5fe677-c224-4978-9ea3-2f34a04b297f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada925b8-64f0-4661-ab3c-fcd774584b37", "sighting_of_ref": "indicator--0d506ccc-2891-4aa7-bf90-15fb823712fd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4acfefe2-6e14-4110-9837-6d6171b003fc", "sighting_of_ref": "indicator--5c70dace-941d-4ab6-8d3d-77eed86f6206", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5eb4c7-fffd-44fe-942c-897c2cc06e2c", "sighting_of_ref": "indicator--d1aa5fbb-adfb-46b0-9c70-6bef88b2bdae", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a546431-0dac-4a2c-ae5e-a8c73bd2d12b", "sighting_of_ref": "indicator--f627927f-8956-427a-bc7f-95e986fb2211", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba62949-12c3-4f0b-bc25-5aa9e203af11", "sighting_of_ref": "indicator--4ca442b8-ba5f-4bf0-9c30-e27c0e0b0812", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd29601-19ab-4259-ae11-493d4d220622", "sighting_of_ref": "indicator--d285e9fe-160d-47a6-a063-345e1d901da6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d7e675-31cf-4b77-9643-2d73541c5d73", "sighting_of_ref": "indicator--848eed3a-d29c-41d2-8713-ef6d61d741f7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a287c3a-2866-4e55-8840-070efee62019", "sighting_of_ref": "indicator--6e830539-8abd-43eb-bb83-9e0f6fd7ca4c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ddb996-4fbd-4e31-a3cb-1f35f436401b", "sighting_of_ref": "indicator--648ef77d-689f-4ad2-94a7-346aa576f20c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a24712-cb29-4b82-bddf-a892f87bc171", "sighting_of_ref": "indicator--bdb2eb44-520b-4aeb-8bd6-0dd9f1d1af11", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63cce2fa-a700-462f-be45-00777dd7b27f", "sighting_of_ref": "indicator--f7825610-3618-49b6-b3a7-b4038b06942e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--639a6430-a401-445f-b361-aec5287e270a", "sighting_of_ref": "indicator--02b01766-add6-434f-9c43-df33259bdb1c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46cafbce-50af-4f27-995f-74e4fcb06c5e", "sighting_of_ref": "indicator--bf6561fc-c828-41e8-9ed3-137d6ed9d64c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4473187b-b47f-47a0-9527-d6ae2949641f", "sighting_of_ref": "indicator--3687b327-2f5d-4c52-8ae5-8659863bab2c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d821ddd3-570f-44cf-86d4-914d47a28b81", "sighting_of_ref": "indicator--64a2200c-6ce6-4071-a3fc-010305208b46", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcca845f-ef00-4341-9705-5748e0030e70", "sighting_of_ref": "indicator--1c98a5ff-5b55-4db4-96d1-a96113d316b2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7f9af3-dde0-4bf7-87f7-1b7aa6962bfe", "sighting_of_ref": "indicator--8d6940be-ae37-4277-b24a-fd4309524e46", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa30ff8-6ac1-4018-84fc-0e8f016f477f", "sighting_of_ref": "indicator--241b2c92-6bbf-4eb8-b938-bc0c7415f960", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df84a97b-4c8f-43a5-9cca-2bde1444825b", "sighting_of_ref": "indicator--1a3770d3-fb45-44a7-9999-e35e176121f4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f4a04f2-df31-4e2d-9887-ded2b46a2fd9", "sighting_of_ref": "indicator--c0b85446-0fee-4159-9b5f-fc2215294b34", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9789aca2-8de2-4d04-86a5-abe4c8b73474", "sighting_of_ref": "indicator--d4cecd71-3ff1-4fe8-a081-38f56d3245e7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2af1931a-d5ed-41bd-b09c-16a25121755f", "sighting_of_ref": "indicator--3d6aeb08-86a4-4a34-a52a-facbc73e919d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc150779-afe1-4242-9124-def393e5e520", "sighting_of_ref": "indicator--41a81983-e0a4-44cf-9692-ea354b859a3d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c550a77f-3466-45ff-88e4-47b0e9158686", "sighting_of_ref": "indicator--f6a12019-36d8-4a3b-979c-f36ba9ccbc2a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f589825e-6950-4ca0-869d-5486884264ca", "sighting_of_ref": "indicator--87515f2c-a0ae-48e0-86b2-60e26ac07e7f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54f7321-8bff-4e71-9776-ade6f23ea99f", "sighting_of_ref": "indicator--67f14cfc-2cf4-4143-83ed-bc713d233efa", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f6e1f9-e5b0-4817-b96d-92e80a9763c1", "sighting_of_ref": "indicator--5f0a205c-7441-47a5-9b32-02c8d5befd19", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9195cb-a210-4c9e-86b3-d03951d17f6d", "sighting_of_ref": "indicator--adbd5584-dda6-4f17-98f1-679705b3c784", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31cb34e-9d9d-42b0-99de-9d8930ad4dc0", "sighting_of_ref": "indicator--ee30eb8f-ab52-4108-acfa-caeec97cf5fd", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b327dbb-2c8d-45ac-b767-d75402136e4a", "sighting_of_ref": "indicator--4309dad5-5c87-4f1c-a23c-00861f1cb8c0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e2e6ec-1900-41c2-997d-94dd2a333417", "sighting_of_ref": "indicator--b32b64ba-c695-437a-8bdc-87162e6bb127", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e31ea4-24a3-48d0-9157-ec49f17a84af", "sighting_of_ref": "indicator--bb63db8f-9f34-44d2-b0f0-d61d846f9bcb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8223ac9b-ab36-4101-adf2-c359691be2fd", "sighting_of_ref": "indicator--3c08df96-d64d-4ada-aeb1-5cef73317e7e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b8c607-69f6-4e8e-b3af-0a28015d01d5", "sighting_of_ref": "indicator--f772a589-ed92-4da0-95da-ceb7227abc4c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e24608-2492-44db-9c6f-0cfb3681aaf8", "sighting_of_ref": "indicator--30ee7f0b-d682-45ac-87a4-62b5f719ddfa", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7630dc4c-2e22-4b43-8628-4cab91d0354e", "sighting_of_ref": "indicator--a9002cb1-3db9-4e7a-85fd-ffb4c3b8b01f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde00338-0d77-4496-b8aa-5a75f6a0f029", "sighting_of_ref": "indicator--b12d43d3-6d92-4d73-9f22-897c23b2f326", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aaa5949-d058-41e3-936b-e4277649b479", "sighting_of_ref": "indicator--20a9039f-e6a7-4a17-bceb-05897dcd75ee", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87bf538f-2666-4389-826f-7b324e1e9ea1", "sighting_of_ref": "indicator--c59001fb-91e4-491c-853e-92197cef2745", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc24a3f-e23c-4f3c-9e06-f660c74dfee3", "sighting_of_ref": "indicator--307b629e-dbe1-4903-917a-71146502401c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd60360b-36b0-4038-a80c-0137d4295731", "sighting_of_ref": "indicator--170d999f-4a6c-41f7-8c98-197f67726c45", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb73fad-ffe0-46f1-acbe-9fbc9f68e141", "sighting_of_ref": "indicator--cada7e19-c543-46f7-9918-68ffc39a6b3f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1689cade-7155-4302-8f27-3ba45c24fa4f", "sighting_of_ref": "indicator--0f57d126-4086-48cc-a6a9-deae985067de", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f0b8d9a-2c4b-4d2a-bf1d-71792b4d4746", "sighting_of_ref": "indicator--2b5f318f-3ec5-4669-8738-9d20ba3ac5f2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a2ffb7-e77e-43af-bd8c-f44387cb1de9", "sighting_of_ref": "indicator--d138d282-c338-4bc0-baae-733802505ad8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c3902f5-8a68-4102-b77b-6d6555464cfa", "sighting_of_ref": "indicator--5160815a-883e-4bc0-a458-37514ec9ca0f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f92dad-7e1f-4dd8-8665-b10fbb23d97d", "sighting_of_ref": "indicator--2980eeff-d24c-42aa-b087-4259394e168d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--081e8d94-b49c-4996-9bb5-844ba191d10a", "sighting_of_ref": "indicator--47ba857e-02df-4940-8952-4700211ebc9f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--967ef0e2-6f33-4549-97ad-05ee87396a3f", "sighting_of_ref": "indicator--dbdd4e17-fd14-44c8-b40e-c6ef60f6b11b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ff95f5-3e06-43d1-9f35-0cdf3c133c43", "sighting_of_ref": "indicator--832c47de-8fda-4a54-80f3-57132690fe3f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d91f4d-6378-45ae-ac78-74a00b5acb4d", "sighting_of_ref": "indicator--6d25c058-1ea3-4f7b-8cd7-eed520f26994", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e6c8b9-a2a4-49d8-a1fd-58dc6c4c0ef0", "sighting_of_ref": "indicator--772b5190-de73-4e1a-af5a-244f168b0a46", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a0bc8f3-c479-496b-985f-9d1ddb90f18f", "sighting_of_ref": "indicator--5e98dafe-4a44-4402-9b4c-633aa20cd835", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53bcfa04-c65f-40c9-bb8b-7f58711fe2a4", "sighting_of_ref": "indicator--1b722859-68b5-4a1c-af81-009a91a39063", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7278d13-fa48-4734-88fe-11e61b856577", "sighting_of_ref": "indicator--97e505da-9eaf-45f0-83b9-5bc95e43f119", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f8c165-8243-46a2-bd1f-cc18d32951d2", "sighting_of_ref": "indicator--7383f92d-e3e9-416f-975c-1f45761c19a7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78c42c9-1c54-4747-ad00-693359090e6d", "sighting_of_ref": "indicator--3020038c-e4f3-440d-9bca-9abf69958e71", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a44d8ca-2bb2-4847-a8b2-4e48ec300124", "sighting_of_ref": "indicator--3ca69f69-c943-4fac-957b-0e6855ef517e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb3a917-66a5-4473-8c79-fe00f0529ecf", "sighting_of_ref": "indicator--56e8b9df-fbb4-4015-840f-72926b3dfc5b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3da1c32-b04a-4cfd-869f-dcec18311c9d", "sighting_of_ref": "indicator--eb6be29c-9bab-4bb4-b75e-fd78eb023432", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb09254-36c5-462e-acea-cee1ab51baad", "sighting_of_ref": "indicator--74531a9a-a325-4104-ae4c-12487fcc3905", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0284efbd-8403-40ff-acc7-9bf24aeb9131", "sighting_of_ref": "indicator--69a4b563-b333-469f-88ac-509976769081", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d86c3f16-f426-445b-8a91-df09ce15cc51", "sighting_of_ref": "indicator--1290742e-a236-47da-88c5-367196a4a55e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7dbd8c3-1b50-490d-911f-6a566431fd98", "sighting_of_ref": "indicator--cd7c274b-4b6f-4834-b858-93daa9bae572", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ecaacb4-84ed-4a66-9c3b-8cbb097f3a4a", "sighting_of_ref": "indicator--c152023e-422d-404a-af45-9c7d699a834c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e0c9851-2a53-431c-a66f-7bcd51824fa2", "sighting_of_ref": "indicator--3b7d867e-7ba6-40ce-98f6-99fe9303ef79", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6b2cf8-3a06-4f6e-85ae-a797dd558456", "sighting_of_ref": "indicator--7bd3391f-849c-4a3f-988d-25d7c88b3d1a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aeec596-e782-4139-940f-b81f117d8fa6", "sighting_of_ref": "indicator--17aa9e28-3ffa-4ccd-a365-4eb3e5a02ab5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa1415c9-d17e-43c0-8bdd-d8a1a08f11fb", "sighting_of_ref": "indicator--ead14f49-0c1b-4293-8432-4fef94091513", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6763cc4c-929a-4f33-b4cf-4528d92f396f", "sighting_of_ref": "indicator--840f174a-d246-439c-bcdb-657ea7475016", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f35276-f9ea-4851-880e-7d4de80f14da", "sighting_of_ref": "indicator--177c2bc7-b55a-45c1-a01e-c438c98f3206", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c02516-f6a5-4edf-846d-dcb64828a37c", "sighting_of_ref": "indicator--792ec9c5-2c08-4dd7-bb7a-574224c75de6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9442524b-48eb-419a-affa-74e150db1a3d", "sighting_of_ref": "indicator--c993f450-fa9a-421a-8d0c-b041551c989c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7724024b-69b8-463e-8130-124d8730cc1a", "sighting_of_ref": "indicator--41c3518f-d767-490d-b5bf-11ef56031274", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--884fc316-439a-4536-ab48-06c126e40a24", "sighting_of_ref": "indicator--c1098bc0-6302-46fa-a39e-d09f71ea3c93", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7ab401-3644-42b5-b3a5-2225b07810aa", "sighting_of_ref": "indicator--b5bfdbf9-c0e8-47db-8fd7-946789cad9bb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0827dce0-e4bb-4a2a-9a06-045545d5ef7b", "sighting_of_ref": "indicator--10e8b434-34ba-40d3-9a77-f2b1e70306d2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e1d9f64-cad7-4805-bd63-62e61804acdc", "sighting_of_ref": "indicator--8533fb0e-154e-4c50-a4db-615f54af1659", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9549b929-9e02-4674-9a0e-828fa71e5326", "sighting_of_ref": "indicator--b1ee29af-c71a-4f77-93ca-f55fd9034eb7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80c6eb98-5e83-4ef5-b2b2-1b920580e02e", "sighting_of_ref": "indicator--155aeca7-7a4e-4529-bc96-f842892310f6", "where_sighted_refs": ["location--33434518-b664-48a1-9ff5-e3245c3ded1a"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512beb30-752e-4571-a6e0-b9595fdde621", "sighting_of_ref": "indicator--8d69b701-3866-416b-a64f-b0de5b0fdae7", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a026fff-890c-4db6-9642-10f8d61282ae", "sighting_of_ref": "indicator--25a8f4ef-196b-4e03-afe3-f4b16e00581b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dfd45a8-38d4-4e19-b79d-2c0598905ea4", "sighting_of_ref": "indicator--3c8bdc27-0e4e-499e-9d8e-43d4883e81bf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c51488-ce3a-4d46-ae19-7107623a75b9", "sighting_of_ref": "indicator--a1fa8a1a-1085-46e1-adc9-0e1ceeff25e6", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b212049-ec47-48a7-8891-c53a00c9a68d", "sighting_of_ref": "indicator--2ccfc1e1-70fa-47b3-9796-579a5417cbf0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23e34c3-51ca-4cbc-a81d-b54cae9aa42d", "sighting_of_ref": "indicator--0907dbd1-d029-49e9-af94-622458153969", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c2177d-a4e3-4669-807d-c3b969cf6e2e", "sighting_of_ref": "indicator--7ae7f7aa-5775-4dd6-bab8-8f80ca55ba6d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a9aaa74-88a6-4594-96de-b64974355795", "sighting_of_ref": "indicator--4da71824-4537-4db6-9903-9f68f9c4de09", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b18cb17-5582-4451-ae43-ab33c555c0da", "sighting_of_ref": "indicator--62a81352-6b79-419e-b792-5ca7ebe90986", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de58ce1-a73e-47a7-a670-f1e5f0ecd5e0", "sighting_of_ref": "indicator--3c4c46b2-73d1-4636-ac76-bfde08d4a794", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8def460d-ed07-40ee-8295-3bf28c808a0e", "sighting_of_ref": "indicator--7453b08f-ffe5-4504-97b1-04159f9167ff", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0815bca6-e809-4bd4-8831-a610577ceca0", "sighting_of_ref": "indicator--c3837c62-a055-454b-93ec-e4aece4a9b73", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a151c682-0c14-4d96-8c4f-fc3868969280", "sighting_of_ref": "indicator--dc01b16b-da6e-4f17-be40-964fb45cc3b1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681cc1e2-1c18-4838-87b0-9d60a10c4719", "sighting_of_ref": "indicator--f4c83e94-f2ae-4959-b64d-86256557eea9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8bf732d-a5f6-49c0-a18a-5168a5125b8f", "sighting_of_ref": "indicator--9f20f8e1-002f-4a46-84cb-a01feed31748", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28af9c84-ae37-4cae-9e2c-9cfa9c94f76e", "sighting_of_ref": "indicator--f064e947-19da-4577-b0e2-ebd0cdd41d00", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15c63d0-991d-49e3-8675-b5d8f5442d02", "sighting_of_ref": "indicator--c6c10a43-3fc1-4b77-a91f-796df3c563a2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61bd5b89-eb2d-4c6b-8ea7-42b99fed34a3", "sighting_of_ref": "indicator--a58bc465-7730-4c77-8d9b-6fe816002ef0", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f0f41c-7e45-4923-aaf4-fd88422e4b3a", "sighting_of_ref": "indicator--254708f5-12d9-40aa-b535-4e978930498c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--635cdf82-79bf-46a5-be0d-f6a0dab306c9", "sighting_of_ref": "indicator--9d9188e6-df7d-4fd8-bb67-cf087b2c727d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4246c14-790c-4f33-b4d1-575afb68015c", "sighting_of_ref": "indicator--a19e9aab-e875-407c-9225-97aaf557c298", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d489d0-9b66-4a69-aa6e-f84fb7ef4813", "sighting_of_ref": "indicator--d195a5d4-75fe-4381-a835-098d8b256bce", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a7ab89-83a3-4e5a-8c94-1c8dbd01f3cd", "sighting_of_ref": "indicator--3d811c82-389b-4795-b82e-9d1f6de99b48", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864a4030-9ef2-49d6-9f57-251ac889ef93", "sighting_of_ref": "indicator--cd78b413-7326-495c-a279-ae7a40923db2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--061e27fd-43c6-4a34-9b66-bee2a7c8e10d", "sighting_of_ref": "indicator--38517112-004f-440c-a8c1-ac6089141c7c", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d3666d-a915-42f7-9ec0-e31fb30dde36", "sighting_of_ref": "indicator--a81ff8d0-bd66-4e65-a804-15f734a58b78", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc9d33d-a091-410d-973c-5fc5e0a90978", "sighting_of_ref": "indicator--79836c2a-8674-45fa-8497-41469453e914", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee6d6f6-7c86-4bd0-92c4-c2466dc3a0fd", "sighting_of_ref": "indicator--f9e5dd4d-8595-430c-a9e7-61c949bcd785", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2602a16b-0d38-4914-98d6-581b3dbe99f4", "sighting_of_ref": "indicator--52884999-42bc-4c8a-b3aa-7eaaed5980aa", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--082094d4-fa4b-4d76-bcf9-c17c4d90e1ba", "sighting_of_ref": "indicator--d6a1e979-f96c-4a61-8769-195a38f4027f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b04c6cf-7872-4513-ab83-620360fe51fb", "sighting_of_ref": "indicator--e8c8678a-f6bd-49d0-9c4e-72ccbbd3dc35", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8178b56e-14bf-4c2d-b868-2195e82123ce", "sighting_of_ref": "indicator--0375df0f-6868-408b-9108-9d674fbc97d5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--251dcd27-ac57-41cf-b244-995c42d30fac", "sighting_of_ref": "indicator--1a84fefc-d42a-407f-b941-22b5242a0dba", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327c9b3f-f6a6-41f9-aa16-4784b5882d7d", "sighting_of_ref": "indicator--115cf496-7f19-42e0-acfe-69cfd1351a60", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8474acb7-7d35-494a-aab0-1712ea84b7f7", "sighting_of_ref": "indicator--68621e56-991f-40fd-991f-0e202899e7d5", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e6c848-9680-46ff-a1a2-d15378547cf8", "sighting_of_ref": "indicator--40882b24-2510-44de-9911-b6a64577ff7d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e897d569-3c0f-48b4-8dea-567bc87c0da6", "sighting_of_ref": "indicator--6f1b5def-a177-4cf5-8d87-523627b36b00", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec93b6d4-a480-4601-a422-97c6d52be566", "sighting_of_ref": "indicator--d0f11b59-3a88-47a1-8a1a-f2ddd1ac98d2", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3730632f-a4b9-41ac-8ba6-976d7c4280e3", "sighting_of_ref": "indicator--0ded2cf4-c073-4f58-9080-321071a5023b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3a8d26-c38b-4aa3-9eb2-60cf0c413cb8", "sighting_of_ref": "indicator--20be8a7a-3b3c-46d1-8db8-8969b7038ffc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5575732f-81df-4b3d-9682-c82c8a1c7d61", "sighting_of_ref": "indicator--7175c4f4-f29d-45d6-b761-40027e3c4c23", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a816216b-2dfe-4e38-ae49-75aefd455fd8", "sighting_of_ref": "indicator--0a2bed8a-305e-40b4-a8d0-559a3086f63b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d56ab4-2f27-489f-a40d-c2d288dc895e", "sighting_of_ref": "indicator--034d4dde-cd10-49ea-a5a3-209bfcd505fe", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac0bb134-7c9e-42a3-8340-2984c3ee3043", "sighting_of_ref": "indicator--620cd178-1fcc-4282-885f-ca07d333ab60", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f9a49f6-4800-4178-ae7c-9567a8a609d0", "sighting_of_ref": "indicator--28583111-a20c-4d53-b06a-2ad5874afc73", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--573b4fb8-6d51-4925-8079-7ac88de56d15", "sighting_of_ref": "indicator--e362f31a-cef2-4388-b241-9b0039dbf374", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f2e931-4765-4b53-81a2-605864db4d24", "sighting_of_ref": "indicator--38438d7b-2100-42ef-8fed-7a163bd3a964", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32c5437-1df9-4226-bd9e-ee07bdd86ff9", "sighting_of_ref": "indicator--aedfde12-521d-444c-9de6-3bec978ee1bf", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33596c3b-751c-4a97-9ca3-baa0bae1539c", "sighting_of_ref": "indicator--7cfe3437-35fd-4a10-a143-bac7ef6851f3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9055d08c-4476-4b09-b9df-0a873298bd65", "sighting_of_ref": "indicator--77cad3f2-39de-4da6-8b42-fb8ec68569c4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--babf83f4-1893-4fec-a268-ffaa7cb2c370", "sighting_of_ref": "indicator--ad93dcd3-9c94-46df-8ae6-7a2bbb2a89a3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c102633-e4e1-4e18-a8af-87a94a016804", "sighting_of_ref": "indicator--1b91bc97-760f-4003-a170-bab0e4b6b16b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c37ab1-0f91-4e5f-a095-7365d3676223", "sighting_of_ref": "indicator--c8fb7bde-ee7c-419d-bda5-1ed436709ce8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09dfb908-a256-4b88-acc8-db0e8a74ec2e", "sighting_of_ref": "indicator--e5365399-95ac-48c8-8775-842298ff2590", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832bfc47-e323-423d-be7a-f178d93d9728", "sighting_of_ref": "indicator--e5365399-95ac-48c8-8775-842298ff2590", "where_sighted_refs": ["location--1ee25cf1-1579-443d-9756-5aeed24e6f24"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf6ff39-ce71-4c27-b6d0-65d9f9f4b146", "sighting_of_ref": "indicator--f7b37774-cad9-49a6-8174-cb80196dbdfc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d082451d-4b44-4363-b0ac-1853911400de", "sighting_of_ref": "indicator--70107ff6-d7e5-4d49-b888-e0b204caa692", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf7e3ff-43f0-4740-a12f-5919fc24baef", "sighting_of_ref": "indicator--8bdf4d59-27f1-4269-9e4f-26a98c3f0302", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db372d0e-2677-47cd-b937-3b9b8c3a273d", "sighting_of_ref": "indicator--8bdf4d59-27f1-4269-9e4f-26a98c3f0302", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--867424df-24d0-453f-bc78-23da78475872", "sighting_of_ref": "indicator--9fa86071-94b2-425a-ab7b-b3421a3957bb", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2734ecf6-6e75-4ad1-a2a5-ae457879e620", "sighting_of_ref": "indicator--9fa86071-94b2-425a-ab7b-b3421a3957bb", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f22634f-e083-4cf5-b06a-764689fd5887", "sighting_of_ref": "indicator--08f97f24-72a6-4dac-a3dd-ee9f745b615a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e0226bf-bb8f-40e4-86db-1845a56b28d6", "sighting_of_ref": "indicator--d950b2d5-e1bd-4c3b-9f8e-fe5f060b7264", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d68fad-630e-49e1-9021-cc12b3c467d3", "sighting_of_ref": "indicator--84de15df-be04-4eae-b38c-12974df068af", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab7ad67-aad9-4f3a-b464-e62305979d58", "sighting_of_ref": "indicator--db5cba5f-a410-4a37-be5f-1c4765c3257e", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed9dfbfa-f36b-4547-a312-47c5de5d0c16", "sighting_of_ref": "indicator--5ac5ba6f-4bf2-48ab-beac-31193ff2c3ab", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3d44ee-f56b-4f24-8847-ee1928a74fa3", "sighting_of_ref": "indicator--bc428d07-7b89-4270-b590-2f6d78e30062", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f8ee55-b287-41c4-ad3e-aa4d7727e5d5", "sighting_of_ref": "indicator--e724cdf6-ecc4-4ca8-b8ae-910823c3cc74", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dddcbb0e-4646-4606-9a48-bd272b30b8bd", "sighting_of_ref": "indicator--a90386fc-babe-49b8-a8be-57d2215d8579", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a6eb20-be47-4d6f-b6cb-80dc61f29dbc", "sighting_of_ref": "indicator--81579a04-7cec-49cc-a1ce-5356dc44e56f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dacf455-fbb4-4d81-9f5a-a66cd001d75c", "sighting_of_ref": "indicator--0535dbd4-119a-4526-b986-24ed89ccdb33", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be25aea7-1760-4153-9298-e9f7ecfa3a15", "sighting_of_ref": "indicator--b3f27dd5-9108-4ccd-8168-1d68ecf6f46f", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0200b60-7716-4dac-8aa4-735705dd13df", "sighting_of_ref": "indicator--aa049ca8-89f8-4747-a469-8234f9956ebc", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88ff24d-6b78-4328-9af5-6e7d458b26e3", "sighting_of_ref": "indicator--946a35a3-4f8d-4bd7-9126-74288d235a87", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df57f2e-f366-4a9a-82d2-5845d27fff83", "sighting_of_ref": "indicator--e86eaea6-190a-433b-b0f8-970ad4fc49ed", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--401960f8-17a1-47a5-a90c-52e9cfc2cac0", "sighting_of_ref": "indicator--3132b39e-a654-4c5d-85f5-953b60240cdb", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7279cc-0878-4fbb-a5a4-4e6d96a99db7", "sighting_of_ref": "indicator--813538d5-6acd-4c88-bc0e-6e92f9472a9d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1cc9be2-0213-4a2a-b1a9-608fd0de14f2", "sighting_of_ref": "indicator--41295251-f43a-4f8b-b651-6e0da4f8e87a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64644fd4-2b8a-4cc6-8669-195afaef8b33", "sighting_of_ref": "indicator--e3ffe431-54bb-4504-a79e-85cb20d6ce55", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a9de25d-1af8-413a-969d-b7389bf22b78", "sighting_of_ref": "indicator--d920f8e7-adde-42fd-a1af-15429fe5baab", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d585858-dd81-478e-87f0-9e8cf08b9ed1", "sighting_of_ref": "indicator--614a8744-a77a-4a11-9c5c-db1f135e5b71", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a2c4729-2db6-4ce1-94cf-b62d71c6db97", "sighting_of_ref": "indicator--823f5d5a-edda-4e7d-8481-96ea0c7db76d", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48fd10e7-d026-4f69-bfb7-1913c5c2af06", "sighting_of_ref": "indicator--9f20fbff-6e2d-4960-93da-81a14a41960b", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f21c65-a68b-4b4a-9548-5ecb44df5384", "sighting_of_ref": "indicator--f1baa21a-492a-449f-9c6d-5a467674155a", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d39cd66-c99f-4f7d-aa74-150a39c03ce5", "sighting_of_ref": "indicator--f1baa21a-492a-449f-9c6d-5a467674155a", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faab786a-cd97-4ca2-9b81-4529e8481c6e", "sighting_of_ref": "indicator--1df639d2-e797-4c35-8579-3dae10fc15e4", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4d73f4-71c2-4b6b-9878-f33d807ddfc6", "sighting_of_ref": "indicator--bcafce94-bb88-4eec-ad51-485555624974", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26083413-9f6b-4132-875d-cab25b49e2f6", "sighting_of_ref": "indicator--9086e65b-13b6-4044-ace9-6e75b1b76a11", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc33346-218e-47d8-80aa-c1a6a924c6ae", "sighting_of_ref": "indicator--9086e65b-13b6-4044-ace9-6e75b1b76a11", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f27db3d-066e-4341-b9c9-6a19c636cac3", "sighting_of_ref": "indicator--21bfef12-fce2-434c-9349-5319d9ca0135", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a2c945-b9e0-404e-ad2a-166e9fbffcc0", "sighting_of_ref": "indicator--21bfef12-fce2-434c-9349-5319d9ca0135", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df27232-7070-4f33-adfb-68d71655baf0", "sighting_of_ref": "indicator--f288af62-89e3-458b-a7d2-fc2c899d0cd1", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8651bc1-1cb4-4fcf-9b7b-c0db10244c6b", "sighting_of_ref": "indicator--d6fab49b-7e56-48a9-aa8a-400e64ffc5f9", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6d1d19-920f-4f75-aa56-9befbf374d18", "sighting_of_ref": "indicator--46a9f4d8-6ca2-414a-acc2-6052293949b6", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ffee297-889a-4e74-af7a-9481e68cc801", "sighting_of_ref": "indicator--46a9f4d8-6ca2-414a-acc2-6052293949b6", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7a3d0e-87db-4c2f-b2e7-79cc0f4ee375", "sighting_of_ref": "indicator--fca8589f-7aa0-4c7a-8590-66ff67ebe1c8", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee7c243-4722-450b-b073-013ab6fb59e4", "sighting_of_ref": "indicator--5941823b-fbe1-44f5-9440-c7073312e722", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ef08e5-04d1-49cc-a690-7d2fa7dc8240", "sighting_of_ref": "indicator--a10c38c6-28a4-4856-8047-e414c5a929c7", "where_sighted_refs": ["location--52775789-5e4f-4064-ab23-9fdc938471a6"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dde72cc-02bc-44d3-9ab1-b8b88ebf59dc", "sighting_of_ref": "indicator--a10c38c6-28a4-4856-8047-e414c5a929c7", "where_sighted_refs": ["location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a427270-63a8-41a3-8a9d-d2826f5791cb", "sighting_of_ref": "indicator--6fa7669b-16e1-4ee4-93d0-4106f8cc927b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4113519b-6cc7-46bc-93a8-ab980dc08b9b", "sighting_of_ref": "indicator--4575ec99-cac3-4844-9a4b-9c57fb485978", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d38039e0-4b31-40a3-85f2-29a14db72800", "sighting_of_ref": "indicator--a93bada7-e211-4893-909b-cb0669a838a3", "where_sighted_refs": ["location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e"], "first_seen": "2026-06-02T00:00:00.000Z", "last_seen": "2026-06-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "report", "spec_version": "2.1", "id": "report--377cf0f0-aea6-4f95-ac9f-4cb6db86c4a4", "name": "Threat Report for 2026-06-02", "description": "Daily threat intelligence report — honeypot bruteforce, web exploit, and anonymous proxy detections.", "published": "2026-06-03T11:00:01.272Z", "report_types": ["threat-report"], "object_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "location--52775789-5e4f-4064-ab23-9fdc938471a6", "location--4a8afeb9-8cbf-4df4-8969-cfbc1df5acf9", "location--ac3ea3ef-6d34-46c6-b129-84d58c5d6e0e", "location--33434518-b664-48a1-9ff5-e3245c3ded1a", "location--1ee25cf1-1579-443d-9756-5aeed24e6f24", "infrastructure--ffd0b089-f906-469f-b027-bd06f0a086e1", "infrastructure--909e46f2-f176-41aa-8212-8171827d0474", "relationship--a32b9ff2-f6eb-488e-a215-feb8bb6fe539", "infrastructure--f2bf93a5-6135-41da-8f25-7a9c04b417d2", "relationship--fcffb73e-3bb1-4866-81b5-72749c71cf82", "infrastructure--4d944301-882d-4af8-bb84-edcf3f9708b6", "infrastructure--1110a957-2697-4404-8b08-adf3624688d9", "relationship--a98696f4-984d-491a-9da7-b9b4241e4e36", "infrastructure--96f3bd4b-4e6d-43c4-b8a7-deb83d33fffa", "relationship--101eb43e-bff0-418d-b9e0-01b90d42f36d", "infrastructure--8ec6b32e-bfae-45c2-81e9-bf35bd73c5b9", "relationship--88a6e617-b7f6-49e0-a63a-98014666d168", "vulnerability--0f503f92-1c5b-4357-bd56-bd6059070790", "indicator--48e68965-daf2-4687-97da-28ddaa1b3063", "indicator--cb2efb15-aebc-459b-a64b-27e76198652e", "indicator--c359a99f-b682-414b-9731-3c63a86c9b90", "indicator--5afe2479-8104-40da-9ba2-211419cd8d0f", "indicator--c9500f18-1fca-41f2-9641-7a4e9ebb017c", "indicator--dbc0f955-06c9-464b-8b7e-f68516ea720d", "indicator--d3f53f09-3a8d-4718-8863-166e60f9a984", "indicator--3a134ad8-2c30-4b6e-a666-ba54767db8fc", "indicator--98fde59a-3f8e-46ed-9bf7-32740fc00ec7", "indicator--b9d2adb8-fef7-484e-a7c9-b81a23cc9ac0", "indicator--3a59b826-cf02-497c-b81b-7201920d6d00", "indicator--cee95e42-53d4-4076-9de3-4164c1292edf", "indicator--31589cc6-4625-437d-bfb0-b251b341c9d7", "indicator--40faf87e-795c-4d58-9f9b-b79336b68155", "indicator--7223e17c-2ba6-429f-b39f-09a02eca8688", "indicator--252aa593-6194-4178-8838-0b6c9d1fb1ed", "indicator--a7d9d6d8-2865-4b83-b3d8-2488c3f98e97", "indicator--86d8bda4-92da-4879-a309-e20e658b625c", "indicator--74843b6f-348e-4eb8-bc6d-292456b294ee", "indicator--dddb5bb0-7da7-43d1-bfa0-4fbc2b8ba86f", "indicator--37a6669b-d78b-4cd1-a0f9-db8ce0aa32a9", "indicator--c3503095-5c06-4b4b-a7f1-5a43e0103a51", "indicator--7043d13d-3670-4141-ad5d-a2589a710d34", "indicator--623fd51e-136a-4230-ab0f-ed28786cbb4c", "indicator--a5de548b-7c8f-43b0-aeb0-72ca6ef7d09c", "indicator--a46ab5be-c963-4ba9-bbfc-0c40dd5fa21c", "indicator--cdb002c0-ea1c-4b2b-85e6-515241be4fde", "indicator--ee92d9b4-ee65-4202-8260-3b729b2a2dee", "indicator--3a40d668-1936-42f5-8d18-6975e0bdc074", "indicator--9efb51d5-a6f1-46ec-b562-7b61ab835653", "indicator--132b223c-94cc-49d1-9ae6-877a68417712", "indicator--53f4ffb1-59a3-488e-b665-fb8f4ed3ed37", "indicator--8af032cb-e6ad-4af6-91d4-e72e652efa21", "indicator--b0d7b3ef-3eb5-4b05-bbaf-6ca1f084a08a", "indicator--f465d6e0-3871-4a8e-93d8-5fe85c9f993d", "indicator--d794cc0c-3e2e-472f-a4c4-c09423bdf7d7", "indicator--24e75f15-8630-4c14-ae27-273b65224b0c", "indicator--5ff04b28-6b31-4fc3-bc73-9bd0fee91422", "indicator--2950ba79-3a2a-4fd4-800e-592333e76295", "indicator--fa60bc34-8118-44d2-94ca-17bc228d8793", "indicator--17694b9f-21ba-473a-ace6-571ddd63f0d7", "indicator--b961457e-d4e4-4759-b959-b9cc7d85a0dd", "indicator--8faf6735-2050-4161-87cf-67d80d8d8e59", "indicator--60a68eae-8933-4b27-9dee-05cb5dc311fe", "indicator--3f20a66e-1cd4-4ceb-b05f-5c3347e04474", "indicator--232998e5-d4ce-4876-a666-cd197fb3b523", "indicator--a67a33af-e1e5-41d4-9455-ce553002d91e", "indicator--e1fb3965-025d-4f8f-93be-2d211b8bba34", "indicator--3c9ef9fd-fa6a-4600-b4f4-af9bbff4a52f", "indicator--60856352-0048-4bd4-ad90-27da49a4ccd3", "indicator--dbc447b8-57ef-4d21-b317-04e5a8fd9483", "indicator--4cb24b2a-f350-45ec-b7a6-cbaad2dde3ab", "indicator--a182c159-c7a9-419e-9512-bd5b48122830", "indicator--ed9ab14f-9200-4026-ab19-182a952b9614", "indicator--a7642a2e-07e0-4b2d-9755-c3cd123e1244", "indicator--7704fb0c-c7dc-48f3-956c-ddd08d607e77", "indicator--9c71afd5-517b-4930-80a9-c0620492b84d", "indicator--4f3be993-ea3e-4d49-a3cb-d5b87a4e43ec", "indicator--1842749a-6a96-480f-88f6-6c0f67a0164b", "indicator--abf4a7b2-af9a-4289-9922-aa38b2b97a7d", "indicator--642871b4-0cf8-4111-8af3-7b36308c8547", "indicator--bd7d5af3-98bc-4ff7-8476-44c48178a8b4", "indicator--ea5cd402-00ac-44e4-b4ac-cdabac33bd16", "indicator--a5e3ecc8-fbe2-4632-8971-ed08982a9df5", "indicator--f254b686-fbf2-473e-ad0c-f622204481b9", "indicator--cc6e10b5-a6ba-4fc3-b251-72abc71f5473", "indicator--e9f7a6a3-805a-4ffb-9c7e-5d6a55495665", "indicator--59d7a3e9-3143-444e-986a-af158357276e", "indicator--15b02218-31d3-4842-96d9-3536259354a6", "indicator--03596420-be9b-4adf-923c-9f66da66ab77", "indicator--cf411c4a-41f6-4360-82be-9332cd3c19c6", "indicator--4bef1dfc-83ab-47c9-81b5-52bcb3fbcc55", "indicator--e86d99ba-d238-49b3-9c4e-b4d3d6d30ef1", "indicator--4fbc1c2e-da01-4f25-92ba-c60a622369e3", "indicator--6dba18c4-9eee-4c61-94b4-a39bbf75bb04", "indicator--d0e677a3-34c7-4a9b-a452-f66ad20a0d9d", "indicator--5d91b303-76cb-4ae1-836d-672c379281a1", "indicator--e59adce1-cd0a-4e5f-8680-499d72a0224e", "indicator--cca8f1be-139b-4e5d-9723-1b111d23b96e", "indicator--174a91b6-6aa0-4e4f-a8b2-510db01c3a79", "indicator--e18cca0b-2d71-4ad1-812a-6ab18846eb9b", "indicator--a4b7c0e5-245a-4d94-9ff7-5865ef86ae9b", "indicator--c0d758d6-0987-4028-91d4-eaf0f904c33e", "indicator--f28346a6-54e9-472e-a02e-3d3317a7c2f3", "indicator--b07918f9-8a6e-4ebe-a1b4-b87be9dfde97", "indicator--bdbb59bf-0b12-4f11-b6cb-45c1a4cae31b", "indicator--4aa838e9-c358-4417-ace4-9ec0d2a0808d", "indicator--a927c1fd-8d0d-4ba2-8909-d4518c4e870c", "indicator--9caec443-5881-4599-b482-0c7fe2b0d325", "indicator--f2179b38-c748-4fdb-9721-0af05fde9cce", "indicator--5d378d62-372a-42fd-b816-ed37d007adc4", "indicator--e3ef8c24-111b-4f45-8d5c-07deee7247ec", "indicator--5725a160-b6e9-4cf6-bead-46ff439d61a4", "indicator--e9fe3a72-a9f0-4e10-8997-6b6e69409aee", "indicator--1c8d6d8c-fb17-45e8-bd7f-f78391245ff7", "indicator--8f390f3f-4bae-4dd2-97f3-214fd8bea67b", "indicator--aa28be57-787a-4658-897d-afca58f70398", "indicator--75d5e453-1144-42db-bbac-e9cf612e6f7e", "indicator--f9585ae7-ee03-4564-b800-b63d9be2477e", "indicator--2f386ace-13da-4e6d-a935-112be5f187ef", "indicator--726c3987-b2ba-4c28-9b21-97bee894a89e", "indicator--f8f37812-bef7-4370-8c7e-9e6e51780f29", "indicator--805b8466-3269-4f47-8dd7-dbdcfd629e85", "indicator--34d0f58f-8826-40c0-a178-91b9db19d831", "indicator--024a6ebf-e939-4362-bf26-d5b3e3c5144a", "indicator--1999ed0d-cd0c-42e7-84fe-3f4889176889", "indicator--86728914-aba5-4805-b165-c2893881d5d5", "indicator--1e42724a-e4c9-4985-9de5-32895b0ca863", "indicator--3e245582-b1fe-4919-8408-9d954eef4b92", "indicator--d18aec52-57a8-438a-b9ab-439f5aae839c", "indicator--0c03cf2b-44cc-408f-b68d-528a4ad0b603", "indicator--17a60827-add4-468b-b522-2b04a2c3d00f", "indicator--4691a72b-598b-480a-bf4e-923942f786ea", "indicator--9dd6d2f7-8a51-4ae7-91f1-a43b0133bbdf", "indicator--3a833907-d690-4f27-a94e-fc6a55913f18", "indicator--62523788-613c-4a04-ad5f-bae1ee027e55", "indicator--6d2d33bf-67de-495a-98f5-e1fef32e5f85", "indicator--c46516da-199d-4623-a5c9-592fb3f46a87", "indicator--41aaf08f-3328-4550-b693-99bfbcc98d7b", "indicator--6ec31b91-1b06-4404-8a25-6515d1ab8820", "indicator--3d67cd99-658b-4aa1-8236-a2b0a1b3e355", "indicator--0922c8e9-4ef3-487b-8fc0-806cb6a0415c", "indicator--d1c02297-006b-43cd-a433-8fbc78aaa69c", "indicator--03b8cc7c-bf5a-4290-9f9e-3e94e13b4d9e", "indicator--248f82ba-92bc-4a96-ba7b-c183f38f9289", "indicator--9f0df2f0-d24f-4a8c-bddb-e2b1959dce4f", "indicator--f0deffaf-6730-4cff-91e1-7db287653228", "indicator--49525082-81d7-42eb-802e-4c88f8b0caa4", "indicator--1b10ff3c-cc6d-4bdc-b364-9fbcc43f4d1d", "indicator--e7786e83-b421-40e8-adb1-0dbfa28edbe0", "indicator--4568c1a2-2052-4620-b3db-b745076bd15f", "indicator--d3423c0a-1450-4f40-b583-33412b969389", "indicator--8c5e4d26-bd1c-49e0-86d3-c0c4dfdd0cf8", "indicator--58a0fae3-89a3-4d13-b8d6-56317f56890d", "indicator--4f4d6a5a-5e83-44d3-97aa-ababfed2ac91", "indicator--4f461fe7-48ce-419c-9d33-6ccf285ef3dd", "indicator--d81bc830-eb6b-4fb3-bd0b-dadd2ffa9340", "indicator--d78fa157-c99f-41e6-a12a-5995d0d820a8", "indicator--667265ce-8ffb-459b-b6fd-397db5f732d8", "indicator--aa8cd0b4-319a-43db-a286-4bbc9c275f40", "indicator--06c714b0-32a7-4ac6-9daa-a3e5d0f11478", "indicator--0c0e9dec-3ba2-4033-861b-08ed7a2f3875", "indicator--0d6c5552-b0d1-4346-b5fe-240d35117208", "indicator--0b45501c-d3ed-4236-aa02-84b26f27a844", "indicator--5409141c-3ab2-49a4-bd18-61cc297d12d1", "indicator--d0daa4ff-fc4b-4390-ae74-cafcce88e8bf", "indicator--567f4b6f-d7b4-4bc9-a512-d0fac65c9fce", "indicator--97503a87-08a1-4b82-bbd8-01ccf70869d7", "indicator--cefb3f0e-1434-4f65-922a-569519465664", "indicator--2ef2d43f-f118-4f6c-a6bb-55c29e1a89af", "indicator--556c93c2-741e-488e-97ae-acbcfe408b0c", "indicator--e0c9b840-d4ff-48a7-b6fc-b8d2311be77c", "indicator--1612be58-f881-4272-bcf0-c5a7aa1cd080", "indicator--2200bb1a-1be1-4c6e-bed5-b2ffe8fa01a1", "indicator--3dd25ef1-76b4-4601-a187-e219a7d2e989", "indicator--c00ff554-63de-4d35-8322-3896f3af0076", "indicator--4a9f5775-135c-434b-b026-3ba30fd6e50e", "indicator--c110a156-21ba-4aad-84a6-b8714feadafe", "indicator--532aad2f-bdca-4f27-a74a-32076cd6d331", "indicator--eb54f6dc-5bc4-479f-905d-8c1bc5146d4f", "indicator--de5b3df4-9acc-4ba9-aeb0-8fffe6961e24", "indicator--0f73f2ad-3716-420e-93b5-8e8acd703dfe", "indicator--f97a4777-cc4e-40ac-9257-ec6a3847ea01", "indicator--bcac2416-5d3f-4f07-947e-17a7a52ac773", "indicator--55df7cbe-d6f6-47ee-895a-ecf0614fc0b8", "indicator--bed829f2-088b-48ed-91d5-dc5bc1a83058", "indicator--d749766d-cfe8-483f-8a0f-d34018123fc8", "indicator--058a7274-a274-4462-b099-6cd1975d171e", "indicator--0c58ff2b-e773-44f2-b3e6-796dff66206c", "indicator--959c6ba4-00b7-48bf-a6cd-7e8429ea9843", "indicator--66b9e19f-b2c2-41bd-b089-1d784e2d6612", "indicator--2b125315-0b3c-415f-be81-d60caa6a3a4a", "indicator--ad2cf86d-99f1-4079-a175-800957bfda33", "indicator--99d0055c-4dfe-423e-b7dd-3e278dfa5292", "indicator--041ae5aa-a069-4ece-b90c-092df317e719", "indicator--2c08b3d4-f588-4ebb-847a-82169d4711bd", "indicator--768753c8-123f-49af-b965-2bc202f819f7", "indicator--f423bae2-d618-4793-9697-0450c99bc55c", "indicator--26389ff3-4cda-41be-955f-550803bca6f2", "indicator--3b07d641-55e7-4d85-b2ac-7c2488f545af", "indicator--bfd262a5-05c5-46dd-8bf3-e09f4c38791f", "indicator--e4c4e357-93ab-4f89-95c2-1def10446e97", "indicator--49b293e5-9366-44f3-8be5-4eb331c6e29c", "indicator--437445b5-bf97-410a-8882-ac5b4678d4cf", "indicator--07ba61ce-e1cf-43e6-a9f2-f9b39637d5e1", "indicator--7e33c750-c4d6-4762-8897-e1d0c7d5e2da", "indicator--4870349c-6165-4765-9267-bcb3f1000660", "indicator--bc08470a-3bee-44f9-bd43-adaf58e769ad", "indicator--e581bc30-f96f-4828-8f73-9ba508224b17", "indicator--85319457-3861-49be-9b40-7e3b60ed809a", "indicator--9834799d-4448-473c-bc67-64992532b80a", "indicator--9c507012-4d1b-40aa-a048-5aa91e08d380", "indicator--1a19cd71-9238-4e06-a69d-58e8b0512102", "indicator--72f9e69a-36f2-4823-b758-63b24589cdd6", "indicator--4bd79d5c-af82-47c6-9e03-06412903cf12", "indicator--c1c34082-5551-4a4f-9518-b2d0aac6adc9", "indicator--20bf87bf-c633-42ef-8f53-401a8f0585c0", "indicator--38bc32f9-8c3e-4137-9348-a08f45448c95", "indicator--791a75ff-4711-4c17-9f00-fa4f2099ddac", "indicator--e0eb3b29-ee56-4c3e-8018-0fbad86663c0", "indicator--e2c0cf5f-49d5-4a90-bd12-b3dc5ceaba62", "indicator--1fba90be-de9c-4b9f-9dee-435896eafee1", "indicator--cd5e979b-e580-4ba1-a296-95fe6579686e", "indicator--5d66759a-0b42-470e-bf49-2d1d778f1b5a", "indicator--16393015-f3db-48f0-bfc6-c5afff534b18", "indicator--6354f1a3-2bec-45dc-acba-51f9ee8a1e8a", "indicator--bb0d4619-1336-4e39-9dd6-b1fa75c64bee", "indicator--51099f24-d004-43d4-8daf-7d78bbe20473", "indicator--b342dd0e-61a9-4079-ac4b-39ece1231cfa", "indicator--92d580eb-3f01-4464-96fb-5fccee690738", "indicator--75bf1c65-ae84-4821-8fe6-8bd63f31222e", "indicator--2c78b5c2-1d67-4dfc-984e-e7fa081e1a47", "indicator--1846f1d1-079a-4941-a3e1-72a14c92c2a2", "indicator--d2e57aad-3d38-43c6-8b34-08d0d11aa2dd", "indicator--007b3592-ff30-460b-a5fa-6afc1e99d2a9", "indicator--d953df77-493a-45a8-ad9e-152ae7c45b3b", "indicator--2878203c-6322-4f09-847b-130b300d3cf5", "indicator--d65db76c-38ef-4809-a32c-02aba14ed99e", "indicator--449363b5-dcf3-4667-b553-ac8da01c5a28", "indicator--102a4998-ffc5-44c8-98ba-d0c1b00e4fcc", "indicator--dfb8d3b1-a704-48ae-9dc9-642bb72b3e2f", "indicator--600e6af9-5994-45f8-a0b0-42f17485b280", "indicator--45fabdbc-10b9-4241-9d3c-59677320a914", "indicator--98836f97-f3b8-4ae5-91ca-58d5d736ca56", "indicator--649c6207-872a-410a-92eb-bc71f4359275", "indicator--ce099d56-0d0b-4af0-9908-f209dc23b06a", "indicator--acd690c1-fb45-432a-a729-9278a3ab9812", "indicator--d29b0df7-5672-4c7f-b3fe-9192ca4a951a", "indicator--367a2187-4cd5-450f-b73a-bc6f000b7f3b", "indicator--8b8c7dfc-9335-4585-b7c8-73a22d749f23", "indicator--6dacd14a-b34e-4b7f-b5c4-5865ac1bd8d2", "indicator--ba4e32af-79ba-4ea7-9f03-102d9fe7bce3", "indicator--7f3e6581-cc21-4416-bf82-d1ec094514aa", "indicator--ff3d7803-a236-4073-80f1-82d2ba669a37", "indicator--336be017-0b64-4925-b216-f6169f90a32e", "indicator--19e38b99-3028-4661-8d6d-91dc92add434", "indicator--9b242056-1948-46cc-b93c-8f4e44ccb01c", "indicator--de69580e-fed3-4c77-b1f4-7867792fa3fa", "indicator--d40fe54e-14d3-4116-af77-637615e7bcdf", "indicator--35d11919-7a36-4444-bd96-3e9f0d005b98", "indicator--bae9411c-4cf4-457a-b4a9-c96bb5e9565b", "indicator--2dc951f7-dd85-49f2-b5ae-3fa8be495844", "indicator--2dae0618-0e7b-4d1a-b886-d32bb5213150", "indicator--c024506c-b897-469e-89b9-0f423858a203", "indicator--31c16749-e6a3-4c71-8c07-09969265eafb", "indicator--92ab7f5d-3d8d-4ba9-a169-0ad2992d7ae8", "indicator--dd899fe1-a793-4e32-919c-b0e0b45a5fdc", "indicator--fa9c1b89-e8e0-41ea-b54c-b7879fcd2f32", "indicator--75358fd8-12dd-4494-9d6b-495e701704a5", "indicator--5a40bc44-cf7d-48e6-a708-56ba4b10e963", "indicator--b8e381bb-4357-4da5-b3b9-d998bc4194db", "indicator--046de570-32e1-4901-8098-9cce44a98469", "indicator--e170f6d6-a238-4108-9f3a-3c8ceb596c50", "indicator--9fa8f23f-d5d8-48c4-8e8e-60ecc3d0580b", "indicator--08b804a1-b1e0-40cc-979f-da952adb6636", "indicator--685df6bc-668c-4266-a70a-a263efdba38a", "indicator--1269bb94-fc87-4858-9bef-4413324f9569", "indicator--e491c819-e4e6-4c54-ae0e-cd4b0f407df4", "indicator--2a488192-943e-407e-9b6a-0c952e99ad03", "indicator--736b0e11-4f5d-4a09-958b-6e50a275d782", "indicator--8ee58415-5398-4199-b82a-e3c2d1ca6308", "indicator--3d970502-7e26-457c-b358-66cb26c88f56", "indicator--5888463f-9494-46c7-872d-4fadc6f98c8c", "indicator--1279e9c5-7738-4b57-a03a-95b29e4ddd3b", "indicator--5be2a2dc-e2a5-44f6-9270-7f05fff66205", "indicator--bbdc13a5-eaf4-47dc-9635-1f91551bef5d", "indicator--2908f27d-33c0-482d-8596-b8e0b2a7072f", "indicator--aaf2ca4f-a607-4e21-aa30-27d8af9b8374", "indicator--34c42588-9516-49f1-b941-894535b0f853", "indicator--c22f5ec4-cd7f-4859-8b26-466f7b60e24a", "indicator--bdea7bd2-b93f-4f5c-82b1-13ceccad52bf", "indicator--ca4d6e8e-a7e9-42b8-8eeb-934326f1f6f3", "indicator--9cd673e8-cdfd-4cbf-92a2-125f5853e250", "indicator--167e40c1-c82f-4582-a984-c1d7348cf0aa", "indicator--3c4787cb-4487-4e36-b3f8-f111ef8c0767", "indicator--24838d40-e8a3-43ce-95a1-ca511eb3dacc", "indicator--d1e6ccf8-e9bd-48a1-8098-38ee57a6f512", "indicator--dbfe4bfb-b37c-4920-8ce0-0e3fd41055dd", "indicator--21d7be2e-bc0a-4ce0-aaf8-e71514c92b2d", "indicator--744882d3-0400-4428-8fd9-cfb34daac327", "indicator--97b080fc-01c9-418e-ac05-c60cef2c6561", "indicator--c7ebb48d-2b97-4768-afa6-6c77dee3294c", "indicator--75cddd1a-7c46-48bb-8312-790c62a61d9e", "indicator--e0e245b8-f0d6-46e7-9b1e-e149eaf4c7b5", "indicator--fd3d5622-22cb-48e4-869b-221b8b4b06b1", "indicator--70102005-5bcd-4f76-a8ba-312fb57534f9", "indicator--b4bfc9cc-7034-4d90-b4a2-018d8e1c428d", "indicator--9d28a5c2-0802-49e9-bb32-e4114f597044", "indicator--8b5f2918-a427-4ad8-8a70-87848a5a2471", "indicator--7b603b82-7b44-457b-b0af-850846d9eed4", "indicator--b566c7ac-3eb8-4004-bc22-2e2861a0d3ea", "indicator--20d6911d-5321-4ffb-a5bc-5184ef9a5fb6", "indicator--e1a58c18-0590-4c89-8533-5e786d9de0e6", "indicator--70e5d1bb-ba3a-4074-a4c2-2e3ab58dac85", "indicator--d362086f-cc87-49ff-9834-b82976fc2347", "indicator--f82db584-940f-4843-80ae-035b8dfd06f4", "indicator--073deeae-2269-472b-9d58-868fe9a8ec56", "indicator--50b5860a-7154-4de0-bc9b-66f08b4616ab", "indicator--9fa4282c-4b46-4500-bf1e-322f0ff78821", "indicator--233d7e9e-d93c-4c20-884f-16921a22f556", "indicator--041ac922-4724-49d8-b7f5-cc59d32f7675", "indicator--13377c76-0172-42a3-b5e3-513b2bcb21b0", "indicator--c14a5152-c1cb-4a7f-be94-5ef818b6bd52", "indicator--704a67d2-d62d-440e-8508-e1d725dfc7b3", "indicator--d788577c-35b9-4430-9588-977557dde6e9", "indicator--abc19245-3150-44ef-9d2b-fe343b3752cc", "indicator--a39494a8-d05b-4c0e-acc4-591fdcd9fa0b", "indicator--ec88ecb6-f0c0-4412-98ce-64fcb911d97b", "indicator--995e1b82-2d01-4ba9-a14a-6d3404798bea", "indicator--961cd5b9-e56b-49cc-858e-d28dec3c9405", "indicator--d7a51599-aae5-4aac-93d5-a512c0d60f86", "indicator--6cadf1d7-87d7-4c9f-a07a-c045ec94ce29", "indicator--8033debf-0b13-47ad-9b63-d764454ea019", "indicator--e28cf1fc-3e44-4dac-9d0c-9335fa359bec", "indicator--79addf3a-3e64-40ec-8f05-4f59e162df85", "indicator--8e4b08e8-2914-4480-bd71-0125b0b1745e", "indicator--f1327c5f-ec97-40b4-9492-a5b5e1705a96", "indicator--cc179392-f4b0-4200-9463-fd99a2d0ae7b", "indicator--887e0ed1-2f38-4404-b185-e6d0700a26ec", "indicator--a9e83620-1f13-4b8c-a6eb-5203fa0a302b", "indicator--af579f0d-d094-4a2c-8c9e-d1f0e6eaa9e0", "indicator--de839955-ceff-4b5e-9332-d13d14dab485", "indicator--04eaa303-a625-4b81-8882-d96d718c070f", "indicator--930ddc3a-7a35-4bc6-bdd5-c0d36073672f", "indicator--40d5f93b-766a-4747-b333-0e7d4ae2665b", "indicator--e80046a1-7c9b-4b74-90c0-d8e2f27a3806", "indicator--4733fc62-9bd1-47d1-8c87-a48a707d3f31", "indicator--ff909a23-1d2a-4623-8182-0510ab35fd82", "indicator--0fa3d672-8f6c-4664-8fb1-509365709976", "indicator--e6547fd1-a135-47ea-8842-fdfec98dd6c5", "indicator--01c70899-6d04-46db-8fba-c0777022e295", "indicator--315712e7-de91-411d-9457-c5290c435886", "indicator--0b1bb2d2-11ac-464b-a858-8f747d52060d", "indicator--e55b69c5-6493-407b-a0c2-e28acd6184de", "indicator--15b1d619-3c6c-4fd5-a8c1-aa6fc4af3285", "indicator--691dd3a1-df6c-4ad0-997e-c76694505f58", "indicator--22493535-620a-452a-b70a-9ab233eca90a", "indicator--d3e65de7-aee3-42bd-a8c0-9b7b09b0b10e", "indicator--038e2d48-517e-44cb-84ef-32a21851db6c", "indicator--f428d8f5-0e36-4b82-9972-15a9a794b3c0", "indicator--1a5f9d8d-5ada-4bd4-913d-4d13d7d63093", "indicator--a334f4c1-95b7-4623-aeb8-036024c26eed", "indicator--330bdfd6-1be6-4ca7-a579-a192d2c5b932", "indicator--0c7cc5ef-9d4e-49a6-8f76-278464372024", "indicator--4c5a3a6b-45b0-4979-beb3-373fa0555d94", "indicator--5116cb06-250e-4a51-97ac-ed01e45faa29", "indicator--9bbf94a5-414d-4d23-972d-4cf058f72b74", "indicator--ea15672b-ebbe-42a0-b8e1-5f6779206d13", "indicator--fe849f9c-2baa-4f71-94db-4ae1e0a3ef60", "indicator--ab3a357e-a934-4eb5-9505-8b2557298d6c", "indicator--2af26cdc-73ee-4389-a8b5-49cfb3e7b257", "indicator--5778b796-3ef5-4990-b484-4c19e492fc37", "indicator--a6eaae97-4899-4d3c-9be0-f4215addea64", "indicator--d348b23b-6cea-43f6-b0a4-0902f6730fe5", "indicator--db809e5f-c6ef-4425-a36e-d864b33c7cb0", "indicator--e9f9aa81-1369-422b-a587-a4513196cdea", "indicator--7eddef7e-1857-4147-a6d2-ce58ef0370dc", "indicator--3c0905de-9fc9-4e00-94c8-5ff1a0682c4a", "indicator--2f4a1cdc-2c2c-4369-aeea-d2c9691f19b9", "indicator--aea95b67-4dad-4de8-9335-66aa4438ab21", "indicator--673499b1-d4f3-437c-be29-a58c082febd1", "indicator--09c212c6-cee7-4619-8b19-8bee7de7fe84", "indicator--fe978cd6-f6e5-4e11-a09a-1cb93d93dd57", "indicator--54dd0116-2ae6-4e21-92ea-e0349983044c", "indicator--f2e22140-01be-41ef-bb9e-a21924477d50", "indicator--73dd7745-17da-4851-9ded-ec0aea358fe1", "indicator--1377d563-6083-43e7-86bd-84a972b40831", "indicator--339c7081-034d-4f1e-8274-6c53d25e37cc", "indicator--a1509435-9f43-4d92-809d-baa9fa043f2c", "indicator--af34fbea-5c12-440d-8ad8-f191255e5cb1", "indicator--75f65be1-fa8a-43bb-85fa-288302857de4", "indicator--b7643998-7287-43e4-b2fb-dba1db984fd7", "indicator--7f41f392-37ad-4d4f-a237-df6327789eb2", "indicator--8fa74d10-bf70-4cad-9d03-8c34f76da651", "indicator--d8d703ef-a157-4096-a2f0-2cff1a3ad200", "indicator--55c901eb-899d-412c-aaf8-54068a323618", "indicator--ff134239-da0b-4156-b411-a81f818dd93c", "indicator--10d32e89-ecf5-446f-9bd8-b4a33ecc5c1d", "indicator--c10aa289-1404-46ad-b6ff-1c73e94cfb00", "indicator--05a820bc-a8e3-4353-bd37-52ca2ecd02e4", "indicator--81a9ca9d-5f7a-41f0-8fb1-6c2bb3f61eba", "indicator--26cbb1e0-d231-4084-892a-a8b9fe97a58b", "indicator--3ee1524c-6fff-44b7-b6cf-809d256619b2", "indicator--189c5ba6-0d4c-4115-a1a8-2113f647c6bc", "indicator--ff8827bc-1ade-4dda-b70b-966628d3ca8d", "indicator--bfa19f45-b7ad-4f5e-b86c-f0eb0fea2c8b", "indicator--5dcf3d65-5e77-4366-8b51-1e394eb1ccae", "indicator--34f9728c-044a-4fd5-b2a5-4f4ac8824d59", "indicator--034d9dd4-2934-4359-b5aa-01e38aa421a8", "indicator--8fe31244-e2d0-4888-b47c-8bcc37661615", "indicator--dabc844a-6aa2-4e60-bd4e-a5db21424188", "indicator--3f02edca-eeb4-4a4a-9fb6-7a667cb01753", "indicator--93f1ea40-e45d-4925-be31-a69a422a78c0", "indicator--e707c2d3-3d73-44c1-a538-352a9c6e9965", "indicator--8781c038-5378-4d0a-ad0a-8cf9f8063c77", "indicator--4e61e241-ea44-4160-b4c4-ff8f13128b93", "indicator--80b5ab42-445b-4f82-b5b3-af2d9ea10598", "indicator--c4474b82-1f16-44da-a335-66c28eb516db", "indicator--79ed66c6-acdf-45a6-9ad4-f15f62c38ec5", "indicator--064aabeb-0c0a-4f7c-b2f6-13a6ef3e6247", "indicator--127cd02e-e0c4-4163-87ef-72699a4047d1", "indicator--567ef3e1-fdc4-441e-bdb1-34bda22a1ad4", "indicator--927f832f-0c00-494f-bc5a-ae6d2e390c36", "indicator--4e2bf425-830f-4189-8e6b-459557483f1a", "indicator--2e5cf9fb-f56f-47cd-b920-ff1c0a873c82", "indicator--a18223b6-7c84-43de-bd05-00ca4a9f5d2e", "indicator--e82e9467-5c64-4d0f-8de4-ff57e655d2e5", "indicator--567538a2-bd36-4942-86c2-5d7b50104ecc", "indicator--47c9f9b5-0264-474a-9272-09a8ca1dc42d", "indicator--91fed14c-91be-4654-9aaa-5f11474d9576", "indicator--c2f9e6b7-6c94-44a0-8f92-5d7dc2d03bf9", "indicator--200ed6b6-de6d-4b64-92be-a3bf7a5d8734", "indicator--8cc8df6c-2cc6-4b9f-a1b9-df93617da443", "indicator--e0bee53c-12d5-436a-a13d-5ad0a14c728d", "indicator--b0de7b96-0774-4daf-8363-5f820065d961", "indicator--4e61de9a-4c76-4411-af9e-f41f85b72aba", "indicator--f3a7ecf3-56de-4031-8362-569ac3ad2aef", "indicator--c9d70fcf-2e9b-430f-81fd-be73673abea3", "indicator--a9a48665-cfd5-4e98-b332-11173a9dbe28", "indicator--3b01797a-ef46-4425-857f-f7fc42ec5f71", "indicator--267cc7b8-31c0-4d19-9478-9118811f32a0", "indicator--c230d8fc-0d0f-40a7-a940-2c2536a19d9b", "indicator--16c55e0c-422a-49a5-b7d4-bc2a556a35db", "indicator--3185ddc1-10ba-42d2-8a14-e223eab918a9", "indicator--d572a07e-e487-4bee-af6e-2e41f22fc2e5", "indicator--ca13cf21-949f-4184-9ca9-8458cc382de9", "indicator--74b06603-c5ff-4916-8c43-65f5f5e18c9f", "indicator--f63817b9-5bf5-4bea-a3c5-077e4348b982", "indicator--64fd8731-d277-4205-a13e-5424d6c9a16f", "indicator--7894e565-d43a-4342-b3ae-965ca8db4232", "indicator--ed2454b2-c4db-473e-931e-cf2baca3a774", "indicator--78262a7e-1866-4853-8b95-a60ee0fdc2da", "indicator--486a2025-2b22-4747-b617-56a7e59c6375", "indicator--9d1fee42-1ce2-4710-bbb0-164c3e6df3f8", "indicator--c8e50eb5-cba5-4864-a3f2-593c851faf3d", "indicator--08cf0924-777a-4a3e-882c-286d86ecaaed", "indicator--62c66dd5-3234-4a0a-9255-883591e7cba0", "indicator--6defe3eb-6afc-41fe-a62d-7a3731b8a611", "indicator--1435003e-c7da-43e7-9860-9b94d0f82089", "indicator--8c9da27e-ab5e-4aad-9639-e3124424df18", "indicator--63b9e96c-4b53-4d5e-9ad4-492333156947", "indicator--6c2d9e14-3820-43b2-a21a-d770507bb951", "indicator--095570a8-c525-467f-acb8-2d127a7ab78c", "indicator--3d0c503c-d327-4e80-af51-97273bc4029c", "indicator--11e78286-d48c-4ac4-996b-ba4899a3f444", "indicator--9744c7fc-f885-4ea8-b74d-9f54863c1d89", "indicator--718c9b58-d0f1-446b-a8b8-5e2879a3543a", "indicator--4ed94898-d68f-4906-aaa9-a218f1b29c81", "indicator--043936c8-c381-463f-b333-ae548a761531", "indicator--51f5387f-253e-4439-94f6-5372863132cc", "indicator--e0d9f3f6-2d1a-4ab5-b94c-5fdd1a5ab99a", "indicator--b4276fc1-008b-4725-b7f0-2f5324b133dc", "indicator--f644f536-39ca-49b1-bc00-1b67965d25c7", "indicator--159c45fd-ba7d-4014-a351-e30bb4b1232c", "indicator--816ec771-c12f-453e-af74-b0d1234d14e2", "indicator--aa41c72e-bf3b-4303-8d0b-c8452242335d", "indicator--49e7b344-444e-453c-be2a-f7ab3a8967e3", "indicator--e5f9a977-6457-4465-9061-e86187d7ad64", "indicator--5df9b031-6db9-4a01-bb80-cf1b88fba8d3", "indicator--d05431c4-3bcd-40fa-9128-86a6621e762c", "indicator--1b0af9d9-40cc-457c-90dd-14cc06ecdf09", "indicator--43180a80-46cb-41cd-927d-36dc9a99e569", "indicator--217ac2b6-4d67-4ddb-9d22-50aa6c1bdcca", "indicator--e77a5f4c-1090-416c-a667-ebbccbba4cce", "indicator--274942d8-7aaf-4a0d-8c1e-22da499984b4", "indicator--a85b606e-5871-4a48-a88b-9252a1b3009d", "indicator--536d46bd-d0e5-43f5-9393-33042a637f12", "indicator--590d8bbc-5506-4d6c-b35d-2e576f8ae67d", "indicator--1dcc94b2-a797-4358-aaf5-df336235a2f3", "indicator--9b4521b3-868c-4c25-ac60-6d69fee6b9b8", "indicator--a792a3a2-c135-4514-a57a-ab6baeb1fff3", "indicator--bfdd74ef-2b28-4f3d-af2a-7d6a5834547c", "indicator--fe111e76-a419-4700-8e10-706076153c6c", "indicator--ccdbe67e-4eec-4379-ad3b-7a60e9ff5f3f", "indicator--9cf88832-1ddc-4acf-b4c8-42251c961622", "indicator--fa4232f8-f39e-4208-a381-086be4028ee5", "indicator--0cd86919-88c5-4a69-be0e-0a30966ed23e", "indicator--16b2570b-1e3b-40c0-86ac-8b423c9dec86", "indicator--cbfe5712-7f37-4284-9047-3289b998dc7b", "indicator--e50b4bba-3aff-4dce-850f-9d4b749f7bcd", "indicator--f284265f-25bc-428a-b386-61df1b8cf423", "indicator--92b36843-9ddb-4c35-bedb-4a7c5021df9a", "indicator--c69103f4-ea69-4633-b79a-76287915530c", "indicator--927a6e2b-bf11-46a7-967c-130eb8ca0544", "indicator--91ffd4e8-f471-4845-ae5c-e904e9f595f4", "indicator--a1f569b9-da95-4d11-aa2c-0683148f4a2a", "indicator--a9b8288f-0ed5-4064-8195-4565994c156b", "indicator--4ce71e77-1656-44f7-a979-40fefd75d61d", "indicator--6402f855-ec3e-4344-8c84-16b9ef93e088", "indicator--2cc41020-cfdb-459a-ab0b-60f061686603", "indicator--2fd00ff5-a3dc-441d-aea4-a239e6a250aa", "indicator--39b99bda-cb23-40fe-b5b8-7288e000dbfd", "indicator--a07ac0c1-c64a-4361-a14b-daea34f3e94c", "indicator--a0c2b7df-9227-47df-83a7-750b5f15e035", "indicator--360360fe-8d45-43ca-b2df-5509b8bd8659", "indicator--a172de97-d5fe-43f0-abaa-ad1faaef286e", "indicator--4ff30b44-8558-42be-b696-3c7d0276e22f", "indicator--1ebae81b-0d2f-4377-b4d0-4fbd56644551", "indicator--ba6f5f39-1f96-4175-89ca-fc61deacfa76", "indicator--0957ca49-4a1d-4249-8108-af200c946883", "indicator--ec609a62-2117-46e4-a3f0-e0e3a9231fd3", "indicator--05507aeb-5bc0-45f6-9e06-c50b12b35b49", "indicator--1a6663d1-52bf-49f0-8907-26aa903c498f", "indicator--2cddf5d1-ca8b-47e1-be85-7aa31f618c82", "indicator--3a711974-8591-43e3-8eee-5c564f8173a8", "indicator--2874e55c-da6a-4896-9c03-2820a674ba3f", "indicator--b3316b3e-6685-422c-8ec8-eec015630fd9", "indicator--004abcb6-4ef2-49db-bea4-9bb176a52c07", "indicator--eda1f679-cd57-46aa-afc5-29110307af74", "indicator--44348827-8d64-4f31-b940-16e35968bebf", "indicator--657bcadf-9b48-4a59-b056-6eb5d8f2ac65", "indicator--d6408980-259e-4263-a940-5db45e9fd3f4", "indicator--aaf72348-d582-4b6a-992f-a919bf357273", "indicator--14481fa3-017f-4733-a66c-aeed08b91a09", "indicator--b0914f51-22fe-4c75-bb8d-dbae2ea06786", "indicator--8fd9d95c-2c57-448d-82f5-2a28b894fb21", "indicator--2d06795b-0058-4a00-983e-f811e912b505", "indicator--2808a9ca-bcb0-4553-9eff-44e4e5250a0b", "indicator--c2b27c35-c737-4f04-9418-ade64da84733", "indicator--200d45ee-ace6-4a62-a7c3-b439fc075edd", "indicator--55fbcb22-9650-419f-b086-062aaefc7164", "indicator--692db512-74b5-4784-b897-c868ebdf2073", "indicator--3b57653f-31a8-45bc-a086-abd9f67fbffc", "indicator--538cab5d-76b2-437c-9ec2-2a078055f613", "indicator--7c74632d-c911-43a7-b513-9ad94ab4feae", "indicator--d81f5585-5dc4-4184-aced-7f3cd4763aef", "indicator--97e23658-f724-48e3-b766-ff7b6f8fbc51", "indicator--bdc75047-8a76-4913-aa4d-178e5f38010c", "indicator--3747b1be-be64-480b-9b84-c8fb2492167a", "indicator--04a0a73b-0793-46c8-b52b-ef3252565459", "indicator--421d641f-76ae-46b4-bb55-4a488999b5e1", "indicator--daeb7537-5497-4bbd-b5cf-a14438c2320d", "indicator--d67b8d8b-ac8d-457b-b234-72b9f8060688", "indicator--693a6ce2-83ce-49bd-8fd3-e709ed3c728f", "indicator--b1fe561d-20fb-4c4d-a3bb-e7b518599131", "indicator--271a2233-6a27-439b-a21a-1f1b2fba2eb8", "indicator--0f46716d-bae1-442c-939e-1d1628889724", "indicator--6dc5fc1d-700b-4cd6-914c-a161d8ea9128", "indicator--24442c84-6572-4ee8-9bf0-f8991d4a04d2", "indicator--5d1e5945-9ec8-4b3f-8264-b51ebdecff6b", "indicator--8318fd58-76db-4bcc-a264-b7ebe00e604a", "indicator--ca21e840-87e9-4e28-ad5f-e927436e66c2", "indicator--827c7c9c-0bd1-4def-a844-0c9b1d11cf9c", "indicator--69c3d2b6-224d-446e-8055-2b6b5eac0bc1", "indicator--a8aa6118-f67e-4659-a538-5f3f81022d5b", "indicator--9b2f4c44-3372-435a-93fa-8f5bc68ec023", "indicator--fbbec06d-8a16-4316-a6fa-e41b9fcc86f5", "indicator--efe25061-f98c-4372-91af-4221b67f93ec", "indicator--bb475443-4156-4a41-94f8-a7d68e9c9027", "indicator--c7384fad-39de-4bc6-aecb-88ca77d9b751", "indicator--b26cacf8-a6d6-4d9b-8e5b-d943ab0fd84e", "indicator--72e29080-d23b-4b12-aa08-f5e2928d7543", "indicator--65c21d38-0607-4d6b-b089-f28c0ca2a502", "indicator--09603bd7-35ec-485c-bffc-01e656e62269", "indicator--78318679-20da-4160-90ef-a01f02f032b3", "indicator--3f74a1f5-11fe-4f12-bc09-7b096069946c", "indicator--38ce67e0-cc41-49e7-a53a-d82b9db94ed7", "indicator--9dc80f27-4116-40b2-aff0-5f9b39a9da31", "indicator--a4386066-7ed7-43c6-b7ba-71c9097209b8", "indicator--e6491f1e-eb1e-4fa3-a215-864608c62c3d", "indicator--ac2bd11a-1312-420c-a158-93f504d51027", "indicator--3a318cf3-b4f4-49f0-9bee-c455bc47a18c", "indicator--6976e1d3-191e-445b-afac-8d8ffff3d0f9", "indicator--dc74c77f-a9a1-4d60-88ce-5d014c39e42d", "indicator--41a15700-c29f-4067-8ccc-12472fafa804", "indicator--e4982f58-5765-485e-8017-a22877e91f7b", "indicator--a2af2d1a-ffcc-4086-972c-15a7d3fe2fc6", "indicator--f7a87a53-271e-435a-9a70-a866450bec53", "indicator--db774ebf-e71f-493d-bd39-c8212cba2a0d", "indicator--823a6ee5-bfe8-416b-9483-71e74472426f", "indicator--44f41a56-561f-4bfd-a43c-62d5b2e34099", "indicator--aa6c14fe-0200-4ac7-84ea-e83ca2b63a6e", "indicator--6b4797da-92db-4382-9a93-2d7e1f2ba329", "indicator--33b91476-d6d5-4311-8637-a0fdb88c9d20", "indicator--6bc8f815-05fd-4e6a-a5d4-1d5a3c9e98df", "indicator--3d067ab2-7042-4245-ae17-4d3337f85924", "indicator--e4e3dd20-6710-4698-95dd-67b75c4bae17", "indicator--b9acb923-dd85-40ab-a364-b02734e03e8c", "indicator--b042240f-a415-443a-97e2-9df3432731d5", "indicator--00d751b0-d17c-4e16-b557-9133b57bdcf4", "indicator--11fb5365-d25f-4b86-b6fd-6a6ca4d4127c", "indicator--57ccbcba-5cb1-44fc-9fb2-0525f039fd23", "indicator--9787810e-36d2-43f5-a9dd-e2ecc58c71d6", "indicator--fb677279-16f2-4ce3-976c-b902b28eebec", "indicator--2bcac9af-0b1b-4b58-819a-ebae96ba9c1d", "indicator--8c1a2eda-5b83-46d7-9ebe-7c412e2d6903", "indicator--79c8552a-e030-406e-ae2c-d2cdcb71995e", "indicator--a0c2260a-a1e8-40f8-9be1-3f4a1f040b55", "indicator--3a0fd4bd-a0da-4cf5-a954-ebc682604b03", "indicator--fcf0c0ed-7cb6-476d-af3c-a58f527b9455", "indicator--3c4487d1-fea0-447f-8737-f165b5277bb6", "indicator--56eafa81-ed69-49bd-8421-670629dfd5e4", "indicator--13d1b7cf-fb9b-42a2-9540-201e5337b776", "indicator--66da6fa1-1913-4839-bdec-fc78b2265db3", "indicator--91bcfe29-ad26-4f67-86fd-071fa7a1df0b", "indicator--a787409c-522a-4aaf-9b10-919685a1517e", "indicator--1f8d5697-31c4-4dc7-8d22-bb5bc172c198", "indicator--d6f54025-d26c-4820-b1a5-3e51bc288d9c", "indicator--7c2a49ff-09f8-4500-ab6f-3898d5e99134", "indicator--db9de3d4-a0f2-4430-bdf4-d3ea022ab2ea", "indicator--3d312f8f-09d3-4a48-ade8-b9e15edb6266", "indicator--ecd90b26-6cde-4242-b52a-050fd65f07ef", "indicator--523db3dd-3f9b-4fca-b278-0df83379953a", "indicator--a08c7aa5-99d4-4298-b8bd-303ae500db06", "indicator--0eb73e40-72ec-4cc2-a706-dfe82938d20c", "indicator--606d6a6c-3695-4a72-96a1-da4aa7bfca9a", "indicator--d5030c98-07b2-403b-b8cf-72ad7bfcfe48", "indicator--71b62c35-dfa5-452e-8dcf-9c8a15011bce", "indicator--25f6859b-f59a-451f-a765-ea22626a390e", "indicator--e92d1f8e-cb98-45bf-94f9-7388d548ef4a", "indicator--b7cc1fea-3ed1-431e-8dc2-4a7474602d0f", "indicator--6a27c5ad-4a51-4a22-a4f6-022d62fb73a2", "indicator--563273f3-a064-452c-ba9f-f440974fb5ac", "indicator--cfe723de-b1f6-4dc8-bc65-4799bb368b0f", "indicator--61b20b41-34ea-4363-996c-70d26017f18d", "indicator--e8502168-58de-4a14-a172-ead3230adbe2", "indicator--a55aa48d-92a3-4de1-8474-e086186510f1", "indicator--760fab68-3047-44f5-8869-f35606df3fd7", "indicator--f28e74f3-3ba7-4159-a167-a6ea15530658", "indicator--f718a5ed-a7fa-4605-afba-c28a989ecb3f", "indicator--495d6d46-d144-41b6-993d-8cf4427b73b8", "indicator--c93f1ec0-1d69-4f68-884e-c1fcde36df05", "indicator--e2b591f8-d0c9-4d84-bf18-981ed0992027", "indicator--ee761bc4-acb8-4d01-af76-3bc4039f31f3", "indicator--44806004-906b-4d8e-8927-3f86024a08af", "indicator--1096b342-6841-44a4-b827-9f9ddd214c70", "indicator--fcf63e2f-5c4c-4e91-92cf-8549b0ec878c", "indicator--4114c64d-f7df-457f-a67e-6b8f5cf0bcc4", "indicator--8408bc5f-8c81-466c-8905-7bf49568f9e5", "indicator--3eb37f28-0120-4b25-86b1-477b999f9672", "indicator--6c105672-f970-4df9-8d67-0c607712c965", "indicator--3147e669-a913-4361-8daa-2bf83182bf1b", "indicator--30b2c1fd-29be-4f7e-8f91-afaf40584ba7", "indicator--71445d25-5987-49a7-894c-8ff538d9c5da", "indicator--168b726b-623f-478a-beaa-13ca5932f696", "indicator--4ec10507-de38-45ed-b437-4b984b2c04d5", "indicator--69314d8a-8301-440c-85fa-473a5d8542c5", "indicator--c551350e-3fcd-4a2c-8034-c844d4fddd28", "indicator--a9879d26-3612-4e62-9b2e-b017ad77869a", "indicator--7afa7296-d218-458f-95c3-051c3a0f2a6a", "indicator--37ee0871-2e98-47d5-bacf-a73df3460b50", "indicator--d9d0566c-e5c4-454c-9758-68ed5053c77d", "indicator--6b605ed3-f169-4049-b065-1a5e22e09c49", "indicator--6b38a239-b22c-4015-ab2e-1ad354c49005", "indicator--8aee3d98-414d-403a-9116-5cba72d68840", "indicator--df4735de-66df-4694-8053-2a5473c7849a", "indicator--dab40b07-855d-428a-ab24-16209c042959", "indicator--d63dcc5c-2e6f-4aa2-a6bf-3b2babd6fd94", "indicator--1f072aef-a69c-4dfa-a499-dc38fc088d57", "indicator--cf1ca21d-2413-4339-b338-921ab167600b", "indicator--e5e32e8d-0015-48b1-94bc-b9a418fc7ce9", "indicator--66921763-bc3b-4a84-a367-8d92effdf215", "indicator--5ca099b4-d1da-40e3-a738-0ac1fff3f21e", "indicator--4f9a7b55-c0ac-4edb-9fdf-ecf50135d5a4", "indicator--c963b226-5d97-46c7-b0b1-1f9644216e1a", "indicator--0517058d-4edc-467b-b9c1-479509f7c9b9", "indicator--b32279b9-820e-4430-ae19-7f82ef5dbc76", "indicator--1e80a7a2-6af0-48c1-a021-7ecc07668e46", "indicator--d96c8318-7433-41de-b1bb-fa72beb579fe", "indicator--6f1e6d8b-0239-401a-84aa-6dd70eba0087", "indicator--99e25854-b28e-43d6-b40a-39f72b3e83ee", "indicator--30697b4e-714c-4930-8637-fae338ab1268", "indicator--ef78b62b-63ec-41cf-b6da-527c9a0e3694", "indicator--891c30d4-8de3-4f84-ac21-844511fdaaaa", "indicator--10057b46-b688-4b40-9a77-e579d70ecdb4", "indicator--dc51c886-8418-4b4a-8845-d9bd134b0b45", "indicator--075717f9-63e6-4233-8bfa-9ff9edf7ed7e", "indicator--83829ec3-7455-44c0-a5ec-45d7f9d2c261", "indicator--ffb1f171-e3d9-476b-8a84-2361219b57db", "indicator--181f3797-6c36-404d-897a-48f50bfab947", "indicator--a256b70d-1a65-402c-813f-4ac3789447d4", "indicator--0634065c-358c-44cc-be9d-4fd7cc918b69", "indicator--39917706-19de-4e9f-9a36-06f0de883f04", "indicator--6a857eaf-f4ff-4270-b209-99ff3107f594", "indicator--5d5584cb-79e5-4cb6-8a19-d3fb605b35a9", "indicator--d04abda5-3244-47ff-a582-98e9ee8fccbb", "indicator--e8d26581-5aab-44a6-83f7-00fdf76552ec", "indicator--7a9728ce-e7d1-4ae2-97d4-bb5830e6f9e3", "indicator--33f97de3-64d2-4080-81f4-3512496a9744", "indicator--82850ac4-9615-42b0-8d10-d66a03f9a20f", "indicator--75a4432d-e065-4a36-b18b-6b80f4a87a0a", "indicator--8379c529-0662-4d04-86a3-1c06ba386f19", "indicator--eed1686f-f121-4e70-b876-0df57432f4bf", "indicator--72e3b2f7-62c3-42c9-990c-29e434ed2e29", "indicator--a69f63ba-4861-4603-8122-a965d57db0df", "indicator--a6efe05c-6762-434d-96ed-8843631f4262", "indicator--0abf104b-fc4d-4ab5-b580-bdd3ad8a260b", "indicator--23366bf2-70c5-473f-bd45-239f79ed4794", "indicator--2c65c69c-5d13-49da-8ed8-56fa99abf6e4", "indicator--13bf69b3-889b-4427-b934-9d821767b249", "indicator--f4277a97-6276-4a8a-9ba0-8d5d350e025a", "indicator--9a9a7d5b-ce93-4328-bbaa-7c579a142d55", "indicator--2720cf11-3ac3-47e4-846e-ec110ce817e7", "indicator--2a83eaef-6adc-4f36-ba2e-7fcf24bbf410", "indicator--ec660564-7c35-4496-9f9c-d276e0872460", "indicator--406a67b3-ab6f-4d6e-8e3d-6139ef691122", "indicator--5e20611d-27bd-456e-a122-c745acdb9fbf", "indicator--5c01f13d-abae-40dc-b3ef-d3c466999f13", "indicator--ddd358b6-8955-4e1f-9514-ee16c30ce599", "indicator--593ccc7a-ad5d-4270-b71a-e0440a5dfcd1", "indicator--63771bd8-2ff2-475f-ae8e-82037f31512e", "indicator--6270a570-a1f0-4976-9a25-c9c73e3dd1e3", "indicator--dd7ff704-40f9-4a0a-a33c-5bae74f07892", "indicator--b1f28371-2556-4904-9ce6-c7e36bf5c6b0", "indicator--de0fc727-c11a-40ce-970e-8875c2ee1585", "indicator--e5448a01-5525-46dc-b29f-5e883e4ed3e4", "indicator--531feb91-f8ce-4a04-8faf-ff2816b09b2a", "indicator--e47cf35d-f04d-4ac8-adca-895e36f8ea36", "indicator--409975f9-3a0e-45f6-a52a-7aeacd2d7f9b", "indicator--160f2fbb-7f04-46dd-bd5a-91452ced20fc", "indicator--5d3f3a98-4a1c-401e-b4e0-7f50bd687598", "indicator--a2c42112-53ea-4808-b8c3-43188997a831", "indicator--f78064cc-c1ff-427a-88d6-283df8ec5d5b", "indicator--36d99f7e-1556-414e-b440-4a7b28ae037d", "indicator--349ad314-d693-44eb-8ea1-1f5c73e79bf9", "indicator--9ee77fb8-9d52-40fb-b34b-8cdee6ec0d3e", "indicator--ad777957-1aad-4263-aec2-56b94e837161", "indicator--59a4fb3b-271d-4153-ac3e-dd2aa6744cdb", "indicator--06388b1d-bcb6-4385-8fd8-b2bc8881ff95", "indicator--f36d9f5b-6886-4294-bf59-00bd6ec9db8c", "indicator--2e0a0db3-28e3-4763-b1b6-ec751c8f4529", "indicator--f0993f09-3d3a-4a1c-9222-8ab4778d97f3", "indicator--0661c085-9ee1-4aa0-92a8-9f2e2f4978c4", "indicator--206ce2d6-a503-40f8-8771-e9fb5a8e3054", "indicator--d180d35b-df30-4977-bca7-922f40b801ca", "indicator--401aee4a-166e-4e5a-a933-e0ca266c3833", "indicator--6b92e76d-f83e-48e6-9516-e20ee3f80802", "indicator--f68bc37c-f8b4-40d8-85f9-80f406c43038", "indicator--163fc334-fe04-4f72-ac72-0f1e8b805eb4", "indicator--07c8187c-6245-40e9-a2f3-dea42a21dedb", "indicator--793e3f67-e77f-4964-9d5b-b713b7005cc2", "indicator--76394b30-ca9b-49ca-be5e-fb83cfdb7335", "indicator--8b255bef-d4dc-4319-8144-529007b006cb", "indicator--6d659d4f-32c9-4874-8cee-601800a76183", "indicator--755f546c-0302-494c-8394-51cb178d6c27", "indicator--7c5d5fa9-87f8-4f71-a48b-795210a13a74", "indicator--985a94ff-244b-45b6-a5b7-0401ace58241", "indicator--f90ea91d-001d-4d5f-ace8-a914d2fee4e3", "indicator--1768505a-e7c5-4f68-b04f-8c98ea037ad3", "indicator--91b1d4b9-dd81-420a-9de2-c9c5389330d7", "indicator--c947c8d1-f9e4-4b47-9d37-1552e006b92c", "indicator--c5a49dc2-5192-4abb-9f56-d7416a758e84", "indicator--48383197-dfa7-4fb0-b4a9-e611ca046ce3", "indicator--a2d896f0-e11a-49c4-b107-af48d9e9b816", "indicator--18bd825d-5707-4f3f-97fd-619e7bdae568", "indicator--e18dfa78-3944-4bf0-8a36-05807a4d2bd8", "indicator--1cabed0e-72c7-4ea5-840d-f37af4ecf538", "indicator--8a793ba9-597c-4a74-88d6-17be2b02385e", "indicator--714b3b08-b437-429f-8113-8b171d148a6f", "indicator--ba8af36b-2dc2-488d-a6e8-62a53c59e45b", "indicator--3c78d3b0-73f0-4770-9ec3-304aa0f568bd", "indicator--424f2b6c-9f74-4794-8ee0-366ec014e6d2", "indicator--214c9e18-156e-4c56-b5ae-68aaa0329cdc", "indicator--10276176-6ecb-4cb5-89a8-8e178c21b0b9", "indicator--52b35ff4-cd7e-4a59-a6af-ad3eb58e45d9", "indicator--01beaf9b-8ffc-4a17-95d6-89c667a9d972", "indicator--0ce41644-bf2e-4d72-a156-c7d251e211cb", "indicator--5f82b0b4-2b91-40a6-b7a1-b96fed4a8f63", "indicator--452832f0-fd2c-4bd4-868e-293e8c57ca27", "indicator--2068e66c-079b-474c-bd97-ca7bf0bf0736", "indicator--f8859c6e-10cf-4cf5-a337-1bba10e1da46", "indicator--7ca03433-7ef9-4f75-8433-c9d1a315607e", "indicator--c0fe46ac-9e57-42f5-8863-24bf0288fdde", "indicator--8051b798-5444-4205-9cf7-929e563006d7", "indicator--f48e145c-5009-41b7-8461-dd67c3898d77", "indicator--048304a5-aa30-43fe-a9e5-49e68147dfb0", "indicator--83c22de6-8157-444f-8df2-a2a8ebd923a4", "indicator--6f124aa0-0128-4896-b5d4-97c3c6cb82c9", "indicator--bfa45de4-a7a7-4ea0-8b6c-c58c3bc5b047", "indicator--38ffb0b7-cbc7-47ec-a437-69b3790c8f31", "indicator--e2e00e63-4785-4185-883f-82d5380f96aa", "indicator--39d424d6-a9cb-425d-8fb3-b6ba5a5a6bb0", "indicator--027a3783-9192-42c2-8d31-7f12fdb33b8b", "indicator--2de1ea5d-e145-419b-9baa-a36fa1a6359c", "indicator--17a6ef58-6d36-4642-92c9-2515b0125afc", "indicator--3d28aad5-ca49-40bc-8b20-99a57e698e5b", "indicator--fb743e28-f2af-4632-a759-5d655a56e8b9", "indicator--10a8184d-cb04-4c88-9367-cca4b3894be5", "indicator--a8318f09-68e5-49d1-aafd-0bc8a0c1dd21", "indicator--2746d1b3-f602-44df-a2b1-9decb883b890", "indicator--49790930-a2c8-4262-8eac-50bc478bdb22", "indicator--e63c36da-fb3e-4588-a5af-fabc6e74a858", "indicator--14b92f3b-bee3-4923-8cc8-010ba704b10f", "indicator--69dca862-0afa-40b4-802e-5468c0c08ad1", "indicator--5858f9d1-225c-4352-a119-677b3308bb24", "indicator--2a140c52-b7f6-47e8-85a3-8109300f6c84", "indicator--bbf2a705-068d-49e5-b0a8-95518e9fa19c", "indicator--9782fd31-2bdc-49b7-9954-9bf80b3c82b9", "indicator--65741eae-cfc7-4044-9075-7a470148314d", "indicator--fc662134-52ca-4e8b-b230-15fa1c119851", "indicator--5bc42f32-1457-4775-b9cf-ef07c02bc98d", "indicator--e48fc339-bab7-4130-83df-3ba1ca23287b", "indicator--66cda7e1-57f9-45f5-8df7-ee20149e8ae1", "indicator--95469d5a-3415-4eef-a02e-fc203ffbef03", "indicator--36fc1ebf-395b-4515-a9d1-dc7bd94a4279", "indicator--e9933ea3-d237-4936-a563-41b5ec2a3c7c", "indicator--1e9e4f50-8252-4134-8dca-bc5e81451863", "indicator--d028aad2-d1bc-4fdf-8f6c-cb1ba184f45c", "indicator--48882c78-9a9b-447b-8414-2cc565e228a9", "indicator--6068f400-d698-4e8b-8c7f-b7f73fbfa12d", "indicator--c6e7bea7-a45d-4fe0-a3a8-5f8372441d5b", "indicator--2e3a82b2-867f-4a7f-80e6-b829241260d4", "indicator--67b30ce3-8745-4e71-8bfd-471f3ec48aaf", "indicator--ec380104-c3bf-4965-9db4-7a0993563d68", "indicator--f73c5285-b4f2-433f-a4df-d36ce91e5978", "indicator--b30d7d74-967d-4303-85d6-03b0a0c2152b", "indicator--d290c705-2acc-4473-af34-072106570bf9", "indicator--75901342-5bea-4960-9537-f2917b931c19", "indicator--2f8aa981-c2d5-4031-95a9-cff710ef5d91", "indicator--073239c5-b8e3-4267-9fa2-38d10666321a", "indicator--c6b35657-224e-4cf0-b53d-f2992394af70", "indicator--1504f288-dc5f-4fda-b6e2-6700ef6c9070", "indicator--ce3509cc-0c65-4bcf-b682-4eb71c39b77f", "indicator--ccd01ed6-ad41-4956-9d32-3dede54280e0", "indicator--f5402836-3a21-4154-87b3-9c39b37a9bec", "indicator--7bf9b159-ca18-43b7-a650-8707ac1566c7", "indicator--f96a251b-7792-4c20-aabe-b0840d5ca56d", "indicator--a5268b0c-2045-4274-847c-18cfa39ee0b6", "indicator--8e06bb7a-bb22-4849-b07d-aaeb07c857ce", "indicator--1b9c07d0-3598-4528-9cca-3a9b2c3d6231", "indicator--68a7d465-4e61-4fce-8a25-1748ef21801b", "indicator--64bfda7b-759f-4c54-864e-07fa9e630e35", "indicator--af1004a2-b949-4570-9fa8-28e337d4043d", "indicator--f713f60f-3c1a-4184-86ef-059eaf9dc477", "indicator--7dbcf81b-981a-4c6a-be0f-d6c1ed876216", "indicator--c642c91b-b3c0-48e0-9767-8767cc675710", "indicator--306b7e43-aeb9-46f2-bb73-75585f198a06", "indicator--e96ae6a8-13f0-4c1a-a6e4-760b44556aea", "indicator--b95b4786-ace6-43d3-bae8-c794d8cb0476", "indicator--6ead4e48-cd57-4251-b8da-8c0111e8f742", "indicator--13f29763-c846-41cd-93c0-38015f5bbe32", "indicator--cfafd2b1-3c9d-46f9-b494-60a523d4452f", "indicator--aeca708e-92bd-4480-9187-9f420c9cc980", "indicator--8f4b0380-aeb8-411b-bcc2-874a358e2ec8", "indicator--350bb3b3-f13a-475a-9e29-6c51876d0b60", "indicator--e8589c42-fba4-4afc-9172-5c06623b88c3", "indicator--d2c05836-132b-495d-a3a7-89ef3ca4f5ce", "indicator--a24ee9fa-cc78-4ff2-947f-a77d57f43ab0", "indicator--a7766478-e85c-4f45-9df7-7474229b7bf8", "indicator--5a0538b4-c111-40d8-a92e-fc1c513af707", "indicator--aeca5ace-5447-4863-9ba0-1a169438f908", "indicator--c765967d-9340-489a-af62-dd5ee0b3507d", "indicator--85918f48-03b3-4867-b570-2d305b14a857", "indicator--2731c0b0-06e7-448a-a3b0-861f0f17e23d", "indicator--4130e902-413a-4c7a-a5a8-41ea224a6c3e", "indicator--d20aac75-b00e-466a-b11d-93dc01c221e8", "indicator--026566f2-169d-48dc-a4d3-4d8118f5b049", "indicator--10a0bd27-7a9e-4c1e-a998-b11e0d8f3eb7", "indicator--66b58248-1175-46d5-8b7b-036676d509ef", "indicator--2c1abcd8-565c-4ac2-8732-6585d8aa0cb6", "indicator--15d3f65d-2015-4050-a58f-dac7a9f03481", "indicator--d53c4cff-dd94-4c19-923b-b233faf0e12c", "indicator--dca87d4b-0079-45cb-aa51-2d1ecb42f7a5", "indicator--e2f77dc3-cd67-4046-9e09-5e922830bd04", "indicator--f9299804-0310-46f2-a6ce-13dd2b0986af", "indicator--455a4ef0-c521-42ad-8af8-4d5031243985", "indicator--44b5cc63-d46d-4d62-95c0-dda575bc714d", "indicator--58e912f8-6450-4047-929b-f989deba8e91", "indicator--15e4fe6b-0908-4cf0-8fcc-73d116f23ac4", "indicator--78c6ae40-2f85-4ab7-b027-13b5d23dcecc", "indicator--7a8c110e-1a8a-4f16-93ba-455f0ea50f2c", "indicator--5a0087a5-5255-4c64-9136-19280993e1a7", "indicator--49e5a0b5-f2c9-407a-9f5f-ef88bd0d48cf", "indicator--b342ef18-0980-46da-9c11-d3ac418dce81", "indicator--8b49e1df-eb1a-4d42-8f04-57293f1c75be", "indicator--84a564de-309c-4d64-af3e-e444db576693", "indicator--6a683af3-854d-4f8b-b44b-0c3c83bf0838", "indicator--98c34c00-06fd-41f0-95be-d65494fe0f33", "indicator--dc636351-f380-433b-aa29-aab80b9203fe", "indicator--7e2ce119-7e97-4884-bd0f-6ce62c5b83fa", "indicator--675e11f5-d461-4548-ae69-767df5a371c0", "indicator--8b7cfcb9-163a-4cae-95d7-24d6cd68e1db", "indicator--7a26a20f-fe38-46ea-99f9-1d755a988b9d", "indicator--bc8accde-b990-4abe-83dc-70c21e8bfed1", "indicator--affaf42d-861d-490b-ac1c-84e6162db6a1", "indicator--39365f97-4d90-42b0-9f7e-258f51f13dab", "indicator--5fd42f3c-becc-473e-b46f-1f28c5098f02", "indicator--d4ed7c99-bdd3-41ff-902c-03cd81a4f92e", "indicator--2d17e65d-2574-44e6-82e5-4c1acf249d4f", "indicator--806f35d5-1257-4211-939e-83ddb5b01446", "indicator--863a9954-95b7-4e68-b966-0b28ff038597", "indicator--77affb97-71f4-40d4-9750-cb095da065c4", "indicator--8e1a3bfc-940f-4db5-bb20-efdaab013bbf", "indicator--f4899c28-403d-408c-8b23-a8bf948f359b", "indicator--aac80527-00a2-4c65-8622-a8aa3930ad7a", "indicator--6392b8a6-7818-44a0-a104-a12e7e634549", "indicator--16997dec-c4a8-4b75-b2d6-85c53837000a", "indicator--b65c1bcb-3072-4e03-851c-68119ebc2d28", "indicator--53679978-afa9-4030-91c9-aa588d88c3a9", "indicator--554b2822-37a3-4527-9e2d-d33d567ca550", "indicator--bca5bd13-7ee0-4272-8f41-e0052a76bb2c", "indicator--48b05915-6a97-4f0f-8ac0-0dc2e11bf567", "indicator--e24a476f-13dc-465d-a14c-f41984701281", "indicator--f26e7f53-696a-4a6f-aabc-a8f0f719fe17", "indicator--f280ffc6-c2f5-4b05-a288-ef736dff074d", "indicator--d29ff5ef-ff78-41a9-af04-f2a250c03274", "indicator--d0914e4f-3d8e-4e72-9ee3-acf356d6a492", "indicator--5253cfe1-2666-4471-80cc-78ba62707112", "indicator--fa773582-5ad8-48cb-92d8-6907db0377eb", "indicator--f28fd6d0-b0b3-41da-8798-47f3f7d6832e", "indicator--503f1c5a-f4c4-42cb-88f0-8a13515d79b1", "indicator--f68f718f-1b1c-4d94-a75c-932b1bd6d15b", "indicator--80ea1243-81af-4b01-94f1-26b8c1367491", "indicator--8616dfcd-b093-4cdc-aa5e-cae33b7a6fa6", "indicator--1e2a79d0-047d-4941-bc78-6d24b82f0121", "indicator--de99debd-620f-41de-84a7-ebf3908e8259", "indicator--e08716c8-7b16-4c46-919c-04366031cc1b", "indicator--cbe891fe-3675-474c-a177-85cacb9a7c0f", "indicator--c080f541-b8aa-4934-a4a2-e6e87945dce7", "indicator--a30c7711-424f-46fe-9180-ec1e57e25240", "indicator--f313de1b-6179-4eb6-917f-6d63d3a05f85", "indicator--4c65949f-2e3f-484a-a0c2-ab848da2248b", "indicator--0c738dd2-098f-4257-926d-d6c7751cb349", "indicator--827bcf12-f408-4f3a-83ec-169b8d4d94d5", "indicator--6f08b72d-37ad-42cd-b412-5407997557a2", "indicator--40cb64cf-ab0c-40a3-bd25-b5ffd2bb56ef", "indicator--3b45c744-4915-439b-9cf8-5699ad374422", "indicator--1b446c9f-fe10-49c1-ab30-38458fed9158", "indicator--59a75fb2-f6a4-4cc6-8989-9fc252484e28", "indicator--5474f36f-8355-4d2b-852d-ac874a09dbc7", "indicator--e581c982-2699-4995-9b35-c1888d125e3b", "indicator--1fcfd5e8-f106-421f-90a7-22ac582825aa", "indicator--bbad11f4-49c2-4726-8fc4-d1171ac76af3", "indicator--a66eacd7-e74a-46bb-8c4e-a2f98d772135", "indicator--a8744215-6731-42d2-bdbd-015906d44d35", "indicator--9a02c0b3-9637-499b-a4bc-557211f58d7e", "indicator--bc5657dd-e66c-428f-8a22-74edad774ef0", "indicator--325c03fa-162f-4d80-bf18-c2ce1f1604d1", "indicator--7859870a-b0bf-4253-ac3b-e93ada8cfee8", "indicator--4d07d1d2-ec05-42e9-b83a-8aa85f4c84b1", "indicator--1af5d996-8dcd-4728-a292-df1beb28a3d2", "indicator--21885d38-2e0c-45e0-9919-5e17ade58210", "indicator--42f11306-4786-40b7-8b8f-3329d7ce12cc", "indicator--da9fd98e-3359-42ea-bab6-09f5a7ddb3b5", "indicator--0bfa0c92-68be-45a7-b042-1acb514a5a64", "indicator--2b775a3e-be61-466e-8b2a-b41ee269d427", "indicator--cb202277-4cbf-416a-85a3-60d38a46cfb0", "indicator--69e3e4a7-fbd9-476a-94b7-52be86c4ab1a", "indicator--2f40586d-b029-4c3f-b88d-be843c83767a", "indicator--41bc6eac-9f75-4655-a1e9-6d165fcd79cc", "indicator--5e77d3bc-ec8a-4e66-bdd1-56866cec59ee", "indicator--3f3d999c-824e-4af6-a96e-705a7701f75c", "indicator--a1133fa6-af6c-44f5-a2f0-91e0d1a49bdf", "indicator--1fd61fc0-b0e4-402d-96ba-7a7dd83364cc", "indicator--84060fa2-3b5d-4195-b652-d3dd40042c07", "indicator--08eb9725-6dcc-4ddc-8e5b-d1da1afc5962", "indicator--973e0fe7-0cac-432e-9bab-76b7b414843d", "indicator--4606a380-2454-4cf7-956e-cf9befc4ff9e", "indicator--6552ad32-a2b0-4d52-8bfc-24be68442f89", "indicator--ff21cdd1-9c1f-4a6b-9a55-c385a9bcfa5f", "indicator--7837ae10-af0f-42cb-b144-c51d062885eb", "indicator--23ed268d-7570-42b5-95b7-74908cc880da", "indicator--e401b7c0-c36f-4e00-8a34-1a04834d57b3", "indicator--a6e871df-9b69-4daa-bd03-d149e44b7ff2", "indicator--a59190e9-1f9b-40b1-821f-a9f8586f2dc2", "indicator--61a20546-40f0-4661-b949-5c2984fa5d08", "indicator--02cac8d1-60d1-4c43-9c52-059f8c52fad2", "indicator--ebe9b08d-7c8c-41a1-82f0-0dedbe982dfb", "indicator--a9f7e29b-76b0-4f27-8559-afc47595d8e7", "indicator--b8b96c4f-1bb1-43c3-b4ff-86823f59feca", "indicator--6831b107-9990-4527-8889-7413826ed593", "indicator--dd23f5c7-5e71-4eea-87f0-b803fe668751", "indicator--3c0d3dec-2501-4673-b623-6c0ad2601f63", "indicator--afb3ef87-cd08-4ef1-ab20-eeb35291f002", "indicator--e40f8912-7fc2-4d51-93cb-1577bff0f774", "indicator--a4831f9a-439c-497d-b49b-f8ecc11c5a3e", "indicator--aaf20f6a-d6dc-4fe1-a74a-c1a2d240c058", "indicator--63c78a45-26c2-433f-930d-a9fcae9ae554", "indicator--10aa14c3-5b59-4d76-9916-e66ef2090f1c", "indicator--969e2a62-65fc-4205-89a4-2ce480ad8c53", "indicator--924ace83-3c0a-4b31-a2dd-9239ecaedfb4", "indicator--660b92bd-2340-497c-8130-e99fa2cba76b", "indicator--87f5bc75-24db-4596-878f-2e27980996c4", "indicator--25383e53-9b24-44d9-8ad0-75e4d921c74c", "indicator--25f5191f-c18c-4fc9-8fae-d1a5fce49ad4", "indicator--c9e0aaf1-dfb1-4dfa-8e68-cb81e824d63a", "indicator--c32f563a-a13a-4bcd-9c38-77ddf59a0e53", "indicator--f92c8d43-e506-49ce-869e-c61acae92511", "indicator--39a8520a-0c40-4f67-b05a-d9f4c6191233", "indicator--8d12178b-8acf-4c01-a754-f830dfb59863", "indicator--5493b8f4-93eb-4044-a2c1-2aec49bb5182", "indicator--fd60bc4b-c480-4f8a-8836-c7a928104a51", "indicator--9cb10e82-0daa-439e-a4b7-2fca63e01140", "indicator--3d8c662e-bcd4-455b-917b-5bebb3f57dc2", "indicator--db2299f9-d07b-4ad2-a653-59c827ad3241", "indicator--1db8c0e5-b441-435d-9c3b-3ec082e7ef26", "indicator--55abc2a7-f235-4d41-920d-a9ae646a35bd", "indicator--0c30cc33-f04c-45dc-86ae-148aa7889777", "indicator--36984360-c839-4277-91a0-d257a3bc1e75", "indicator--a0efcbba-6797-4fa4-97ba-69035455ae0f", "indicator--22da6639-a9d4-4641-9f71-aab7762a4fd2", "indicator--6d4aa0da-3036-4a8b-aed3-8509586502a1", "indicator--6e5c51bc-4c82-48ee-9d05-aaa76f0b5473", "indicator--f1c46464-9f23-4b84-8826-ed4df7cdf960", "indicator--7758a3dd-28aa-4034-b744-4c20c1f4ef68", "indicator--772575be-7702-4cb8-b325-304ac4011666", "indicator--e6e3f7f2-66f1-4664-9efd-83a0bc7e9233", "indicator--c2c11107-02ea-4a75-a1f0-fb3ecbd7f2b1", "indicator--920e8a14-783f-4342-99ac-9d1d7b6e1b57", "indicator--98b48820-748d-421f-a14b-9ce052897ea8", "indicator--bf4d958a-e61e-47e5-b368-7e20d78a9989", "indicator--98bf9207-ceb3-45a9-bd45-584fe2547e6f", "indicator--674c9553-eccc-404b-bad2-69f9e90abcf4", "indicator--3f0430cd-fc6c-445b-8cde-cf53315336a2", "indicator--73a43279-a357-4875-bfab-128af8dea84e", "indicator--b18f29ae-4163-4f72-8282-d2d770e43fdb", "indicator--b17497e4-e1e1-425e-a9c8-69b6176256bd", "indicator--f492c53b-f37d-4ecc-a253-45db1782be5a", "indicator--22c3a840-6fb9-443c-b04c-7c25a1a891b3", "indicator--a0800d95-fd93-46a2-8a9d-41ab342df6cc", "indicator--89b30e96-671d-4ca1-9986-efc55ca95b47", "indicator--a996ab9c-eb91-475e-b007-a33cdf97438e", "indicator--276d67bd-2d50-499a-b68e-59f36059a8cb", "indicator--00f2ccc8-42bc-455e-83b4-cbde4af97282", "indicator--2d91752e-9960-4f40-a53b-431313425670", "indicator--ce80f110-a9f5-46d4-be49-ddbff55754c6", "indicator--f192b27c-42b2-4627-bb98-9eba610023a6", "indicator--e5f000af-a062-4318-8c23-5337979c610a", "indicator--0321bee2-2de8-4c13-86e4-f45e2b37c43d", "indicator--e02b5482-fa87-4eb9-80c3-b8e4ae655d85", "indicator--0a53000e-0dfa-41b2-b012-62d97f13ea1b", "indicator--c60b7859-d3b0-4f60-91df-b08ca283669e", "indicator--f5b5223d-f176-4d40-9d22-689f699f6895", "indicator--dd68b634-9c6b-442c-840a-13f5ce75502d", "indicator--eb2bb9d7-7db3-4d4d-8a37-ed472732498f", "indicator--e309f292-2a62-4ccd-ac85-6d7f1594d2ac", "indicator--6955ccb9-3523-45f9-bc3e-d408b46e03f9", "indicator--3954dd4c-cbe4-4220-9c6a-a5d7b8381d39", "indicator--a8e9dfa5-9a32-4419-8559-175b4c719bc6", "indicator--41854438-3ac2-4920-999b-f7532587b854", "indicator--63106bb1-1f3f-4af3-9f4d-be43ac7015ba", "indicator--5ed7807f-8082-49c6-91a3-a833b375a366", "indicator--162f7590-2136-4dfa-92da-f0b8b0a3089d", "indicator--08e7dc16-6fff-4ca9-acab-c8fc8969fcd7", "indicator--24857bb2-6644-4ac0-ba1e-fb156cbbe755", "indicator--63a9ba04-8cab-4aae-9533-087054a679e0", "indicator--9c62f5c7-0feb-413a-9ccf-db31d780fb66", "indicator--fd6db611-4975-4bd8-aafc-4470a57c947c", "indicator--06381732-b5cb-470e-aea6-58008b1f7ce4", "indicator--93eb02a1-e39f-4c3b-809b-adaaa9fc2d10", "indicator--72f5a0dd-909d-46cf-bc79-fa33491e3425", "indicator--3c8dfe40-6122-4f7b-9502-64684c8fb19a", "indicator--2544260e-d552-43a6-baaa-d08a85e86933", "indicator--25ebbcdc-6172-48b5-916b-01d48d1446cc", "indicator--adcb6b47-39f5-45fb-897f-2cac222fc562", "indicator--ccc6b46b-2a20-4a00-9a1b-4359351861c1", "indicator--a55a54c7-8e2a-4821-ba0c-544b9b35c595", "indicator--0e21eb27-3b20-49bb-b3b6-04059ca53f79", "indicator--2c44dcda-81b8-41de-85c8-a7c0d81db0a5", "indicator--e4c82f0d-1e38-4e22-a666-d3e77c3978a4", "indicator--160edd15-402a-48db-9139-e84d8e721e96", "indicator--3422d6b6-e92b-4568-9a70-1069a4e628d4", "indicator--ce2675a0-f4a0-4a4f-817f-5a26f065604e", "indicator--7035d896-3df3-4406-a954-466d9a1986e7", "indicator--79a67a68-6631-4932-90fc-2162b73f173b", "indicator--d646fd44-6d94-4edc-b008-e21e9f1d4aa1", "indicator--0b8a3698-0cac-486f-a9d9-2297594653ab", "indicator--fd915320-b889-469f-9bad-2af8bfcbae27", "indicator--932529d7-cfbe-45c8-aac8-33ba106d4193", "indicator--95e31ec7-95bc-41ee-8fae-8b749efc0dcc", "indicator--bc449ce0-60e9-43b5-86fe-32f7f5fcdaec", "indicator--fe586fe6-fe26-4ad1-a1bb-0ab3da73ef66", "indicator--88f624eb-16c0-4c0a-b64f-e513995293ab", "indicator--47b3fa5c-d0a7-4349-9a80-f232dd70c8a9", "indicator--f6a486a4-0b4c-476e-a355-c19db3d02bf1", "indicator--c8bf1b7e-6161-49b1-a771-31969c80773a", "indicator--0f64ad76-2cf6-4d2c-9c9f-70d785223f73", "indicator--3d6853ca-77e7-4dc3-8f02-7cf8b860b96e", "indicator--9219f411-2381-4a09-8913-510f7b5747de", "indicator--1ac83c53-242b-4896-bd4d-042d0742efc8", "indicator--9e1681d0-f02c-4f09-bbbb-3b4cc5de9c1a", "indicator--d1593ad3-810d-4110-8b76-2d86ebf4d824", "indicator--29b0af20-852a-487f-95c0-d2b7e7d72107", "indicator--e3c116aa-9f01-4424-bad9-0e6b8468ed49", "indicator--f8c57d0e-77d2-4f9c-87b1-781ee7c5f75f", "indicator--882074cc-2579-440a-9200-6c7794056f14", "indicator--d4b24d43-de7e-4f29-862b-90b40c328432", "indicator--dcfc64ed-e859-44cb-93f1-dc723bf0f6f4", "indicator--609bf924-ee89-4b7f-bca8-2f9af92d4410", "indicator--a155ae94-4b12-4ddb-8633-643982ee4780", "indicator--2ea8bb1d-6f50-481a-bb8c-53bfccf463d6", "indicator--b2953421-82dc-44a2-b390-ef6edc1ca7f1", "indicator--72503542-9873-47a6-bb4b-a092dc517813", "indicator--3e18659a-cb6e-4eff-bca7-eadf3c873a86", "indicator--ff645a08-1406-4084-9495-330cca664a86", "indicator--befc485d-4161-49c0-bdc5-17c19743b530", "indicator--6effed8f-f0f3-4c11-a37c-bf6406017aaf", "indicator--98911831-0b65-4cb4-98c3-dba1440701ed", "indicator--dd540e06-4fab-49e9-b439-b3bdd2674e61", "indicator--a12e8dd2-d888-431e-9216-65559a7e784a", "indicator--e2498d5a-996f-4eb8-b549-19d27e02528a", "indicator--cd166f85-fdc6-4db4-b47c-b2c100ea103b", "indicator--eb9ff3a7-7ebb-4ec5-8e44-04de5b5c2115", "indicator--af67a87b-7979-425a-ac6d-8df58302e924", "indicator--8303c980-449d-4c4e-8a4f-c8604b4ba896", "indicator--908c65b8-f564-4ae8-9958-4e40976eb5bd", "indicator--368296f1-05f9-4603-a4b6-7599107a4fcf", "indicator--db8b9e24-56dd-4311-a6e1-8fadd36d4112", "indicator--6dcae72a-68f7-4161-a384-39dffbe50120", "indicator--95000cb1-8c08-42fb-8efd-1ca26cca9b0d", "indicator--a9c301d0-7564-4ae1-a113-fbf56fecfdff", "indicator--cf0ca0a3-e4ff-4f22-886e-287a72b0ca19", "indicator--db43f3d3-44ce-4cdf-8a88-d8d32333dcc5", "indicator--856b2fe5-23cd-47f5-b317-4ddc7c0d242d", "indicator--9e2f2f08-9201-438a-be6c-d4136ed34a2a", "indicator--80d11854-49ec-4700-9b77-0714ef9d431f", "indicator--0093cadf-d36d-4037-856f-d1175d76098c", "indicator--4fa9287b-c24c-40c9-afda-b1ee63942667", "indicator--010e375b-1afa-4838-ab28-42666104342b", "indicator--db4e62fc-a7c0-442c-ab6a-e6b76b9fab62", "indicator--ab994038-874f-4ee2-96c4-3d6fbc776154", "indicator--d2dc798e-b28e-48c1-9e99-c0056694252a", "indicator--4f794bc0-d2af-41d7-b422-b2536e7459a1", "indicator--9b5870a6-e079-409f-b448-01cf147c10c3", "indicator--25b89772-586b-4c63-a30a-2107fad2c649", "indicator--c42452a1-6edd-4558-bd8a-c3009dbb07df", "indicator--655221c1-f71e-4859-bec5-0c8d08cdf4cd", "indicator--5ae4c4a3-fc6b-4186-9eac-b075bbd6010a", "indicator--fe2738c6-aed0-48de-8091-c9a797c89a75", "indicator--b6cda503-2324-40cf-9891-1b5632dddea9", "indicator--68bc0090-b260-4ea6-b1ad-7cccaaf856f0", "indicator--3f1b3b29-aab8-4194-9d75-095413c880b4", "indicator--b730cbad-430f-4d63-984a-6f8dafec3698", "indicator--14b03069-15d1-4e37-b176-ea1421621f7e", "indicator--62b3ab35-f190-4a34-91ee-6338ec9776a6", "indicator--66e3245c-b5f4-42fc-baf0-9b619774f03b", "indicator--63a9870a-4213-4133-8dd9-520eda22735b", "indicator--f460fd96-afac-4b36-817b-9128116aef2e", "indicator--e76bad73-60fb-410f-a8f3-efe15bb62e26", "indicator--bed575a2-6804-4bd1-9f81-0604d024f6cf", "indicator--cd333383-d835-4e71-a3b7-b7607e565cbf", "indicator--bf3b7615-879f-4559-a3ea-b8e0630bca4c", "indicator--296e3c9b-d53f-41d8-af0b-e84be0e159bc", "indicator--3f5c64ba-3fc8-4dd5-9eb8-b5d448b78b7e", "indicator--46b9bcb2-debb-4ec3-ad1b-20db1975082a", "indicator--002d0fee-9d10-49d4-bbcf-6d2dd6666053", "indicator--623b6d96-971a-4593-ad31-1cd4bcdec758", "indicator--2b2156e2-b674-4c62-9406-06de65d7b99d", "indicator--fcb56737-bf51-455d-b720-b6394ec9fde2", "indicator--ad428069-df43-479e-880a-dc2d66c651a8", "indicator--f091f104-b421-4b94-9514-6f8d4dde95a8", "indicator--0830ce1d-f773-44f0-b835-9ea557897d85", "indicator--05d1e987-15bd-4327-85ff-58dd9fddf149", "indicator--5b45250b-e172-4e68-8da8-93b05a0a9e7d", "indicator--d8ca1fa4-2888-4e2e-b566-e91ae1f3eb44", "indicator--51050f0c-9ef8-47ff-b933-f2fc2a0703e0", "indicator--b08771c2-287f-4881-adfa-6a1c5b3c5d40", "indicator--29d955f1-12e1-4e4f-a2dd-0cd9268abf65", "indicator--39ae6037-b000-4356-8288-bb70cc80758e", "indicator--19d5d2a7-7374-4335-91dd-a69cbe1adc05", "indicator--9a56be7d-111c-4de5-8549-cdb20411b90d", "indicator--52519385-8863-4caf-b76b-71facfa2f94c", "indicator--c3bc9a5f-d62b-4835-b5e9-b42bc1860fe7", "indicator--9079b545-634d-4814-939e-e46542585f45", "indicator--e6482a41-c755-4948-96bf-d6000dfe70d6", "indicator--e71fcd4d-d307-48c1-a61c-16df7994bf33", "indicator--7a4dd490-a41f-4eaa-9b07-1887b02832a6", "indicator--f14420ff-d2a5-42d7-aba2-91381378ca11", "indicator--655ba9b0-8353-4ff9-8849-409095d27356", "indicator--ef949239-d99c-4317-918c-10f9fd38ea2c", "indicator--8ffe74d9-9107-4068-b36a-b9cc910a34b8", "indicator--0741491e-7765-401c-811a-7d40f8a00da9", "indicator--9f64d9e3-a1d0-4332-8881-ff5aec5349e6", "indicator--cc45811b-3eda-4562-a8eb-1eaaf6c38e5e", "indicator--6e39c949-be39-4df5-9552-83337bee56d1", "indicator--6e0266c8-916f-4232-ad77-56c9def6153b", "indicator--fe922418-6aff-4c4a-a062-2d15137330b5", "indicator--c40be5ac-af24-4cfe-b266-29d33ba2ef8b", "indicator--041ae0ae-fcf5-4fa3-8fdb-9005ddcc7063", "indicator--e40c7e94-3be6-4688-85d4-2dafe13a3114", "indicator--85eed6ce-e534-455f-9222-76a12b0254cd", "indicator--054dc966-f7f5-4ff8-aa3c-20f94ed03a40", "indicator--fa2d6c2c-78cd-417f-8e41-598538a8ed19", "indicator--5a5a50c4-6183-46de-9dfc-4fd6cb604fbc", "indicator--3ec16ef8-2b56-4fdb-9c52-4f5e68613304", "indicator--e0789b55-67ec-4834-b45d-2c61b96bcbbc", "indicator--b0d4d153-e076-48a3-88e6-3990f28b277a", "indicator--159d2e7a-a751-45e2-9ec8-fc4608742083", "indicator--e2d21c21-2826-49e7-a567-63ca7af86140", "indicator--8699d853-0bf1-41f3-ba07-1b0fd0f7f3ce", "indicator--1007fb7e-ee76-417b-8731-7503fcdb5096", "indicator--880a714e-987e-44db-a9b6-6bb96e9164fc", "indicator--7c539f40-4489-425c-bb6c-f28a3c7a4f4b", "indicator--59760580-32ef-4b3a-aae1-5306a90604d8", "indicator--eef61239-b22b-4350-bf27-08fa27590f89", "indicator--61857f87-22f4-4fea-a13f-c817582d98ec", "indicator--c865caf6-6e21-4441-aac4-a7d026927c9a", "indicator--3b648585-6782-459b-8832-e56bb0e61626", "indicator--4b9625c1-e8bb-4e9d-b3ca-3753a7241ca0", "indicator--6adf45a2-435b-433a-be0c-970d74fa8af6", "indicator--6de83520-adc3-49b2-958f-5a78caf18984", "indicator--ea226b31-48be-4ab7-b3ec-950a5532b55f", "indicator--d61e8c5b-7c7b-44f9-aa64-76c9e1d886a7", "indicator--095f6b9f-5df3-400a-b4f6-d573136f8ab2", "indicator--4ad9924e-ef83-4f03-994b-a0ea3b621707", "indicator--6e087618-c1eb-4afc-a2c5-192ca6f3c656", "indicator--cca47389-3bd6-4f91-907b-92e9ba65064d", "indicator--26795663-3090-4f51-af83-99693a434e0b", "indicator--6bdb9629-024e-4ec1-ae76-661fd8de42e8", "indicator--308ede30-2786-4391-ada1-62e29f3b267b", "indicator--6d3b7ac9-3d7f-41df-92ba-4cb85871b8d4", "indicator--25e3c746-417d-4d77-833d-1f1c745bb316", "indicator--dc7c6df5-44c4-4330-8aa9-0900809494c1", "indicator--4b86281f-52d7-4184-be57-515a817fe7ac", "indicator--ee66952e-4773-49ce-b807-996c78ebc80b", "indicator--c2c75186-2575-4a44-b9db-a961b873b914", "indicator--d6a6acb7-5d1e-4f50-a4ec-202007299592", "indicator--399ae5d2-1b50-4dfa-bb0c-37eb4498a825", "indicator--328bfea0-5890-4506-8382-0e509b96f78c", "indicator--ab667492-57f7-4043-8958-4c2b49e24110", "indicator--ece31b0d-8423-47e1-a9a7-6ccec1599d42", "indicator--7cfa4f83-9bb2-44bc-9c14-5c83379c4e41", "indicator--4d687f22-801d-4e43-bd9b-27471b7bba6a", "indicator--b10cf0e4-f393-4e96-a4ae-39a95f8c018d", "indicator--cac5fccc-975e-42b2-9bba-ed9df2b206d0", "indicator--cf51d612-ba5e-449e-b489-90af72a37bbf", "indicator--ef5d6dce-7347-450d-bd2d-f072234dcbcd", "indicator--a8723332-1dce-48bf-ad93-821530aa4339", "indicator--59b851d0-5be8-4c3c-a9da-21d3cdddabc0", "indicator--3800399d-01ab-4c5c-999f-43abbc6def41", "indicator--c6fe71af-a467-4306-af51-9346bc85c340", "indicator--7487fda4-25d1-40e3-a6e0-96b66d000075", "indicator--102b2836-ec91-4d6d-acc9-36bfd6f4ccc6", "indicator--af62bbd6-886c-4d38-b314-0a6ad35b4f26", "indicator--2e0a4b39-fc49-42f7-a73d-a9c724af0f29", "indicator--848f1e1f-bcef-47ba-9a41-7c283c042595", "indicator--11fe367b-7030-48ce-ae21-4c752d5f92c7", "indicator--8fdd4b83-0d4f-4a83-a96e-3decf7f4f079", "indicator--59fb23bd-3b7d-4dc7-8717-ec03aaf06858", "indicator--908060f7-c251-4d05-a62e-7ac3ef3035a9", "indicator--3a9a8f54-c60d-412f-a18b-d01767126cfc", "indicator--fa27d754-70e5-46e5-9f2e-daf046842dcb", "indicator--c58b2eb2-4d9f-459e-a6c9-e32143cd8458", "indicator--968d371b-121a-431b-8bc5-fb189089e756", "indicator--20e0a2c2-b119-41b3-8f3d-1ad8a49c26a8", "indicator--92b46369-b973-4efc-930f-8dc6c86450c7", "indicator--de00b0c2-ad39-485d-a280-18a8644b4948", "indicator--ffece23a-5de7-45fb-b7b4-a40554800157", "indicator--9a9f82ee-56ce-44cc-902d-4817150b544b", "indicator--bc443797-b87d-4bed-b175-17baeae824a0", "indicator--e5e33882-96ff-4516-add5-105959e6e781", "indicator--2300fbe6-25d2-4071-b87e-5b71ac598a46", "indicator--7eed9ba5-fb52-4c3f-992b-81ef9f642560", "indicator--03749973-878a-4bcc-88c3-9aaa869a6137", "indicator--49d0f54f-907c-43b1-96a8-4b685f48c514", "indicator--fa829008-e385-4982-9dda-d8f847dc11f8", "indicator--bd0016db-2635-44b1-a1d2-423bcd4874ba", "indicator--5b0a088d-c88b-4ea0-9d49-987b8f81ab7a", "indicator--ec509ebe-86d5-4229-ac2d-6867084ac505", "indicator--07f6de71-8a87-40a4-ad7d-d2dbc49280b3", "indicator--839c3354-4959-4764-9d47-ed299d427985", "indicator--ff113c23-d22d-4c2a-9eb8-8760f175f846", "indicator--159b440d-a7f2-414f-90cc-aec8f770f7d5", "indicator--7614a8ad-564a-45d8-a800-282be60e2ba7", "indicator--5eaaeaa6-afe6-47b5-9a8e-5a271d13f53d", "indicator--67395574-37cd-47ff-93b5-14c0e85f7467", "indicator--2bdde706-865e-4520-a5d6-b41fd3791181", "indicator--4e1c25f3-91ea-4da9-9bef-c077e0951cde", "indicator--975168b2-543a-42ba-8248-edffdb9ae3e5", "indicator--fac04910-0652-4ca5-b0e2-8cf6e41c949e", "indicator--a1367579-3db9-4317-b32c-0f81e5a57c59", "indicator--f01e8363-efb7-4b11-8156-2184b419455b", "indicator--a19bc58e-a95a-401c-864f-88cd47aa8892", "indicator--46365a7e-aa3c-446c-b0d3-1503da660677", "indicator--f10b5746-9d34-4c4f-90ba-23590f0eb510", "indicator--916a1db6-b1cb-40f3-99b8-c1c0804c1cfe", "indicator--f66f6f1c-3ca7-4b4e-a812-14f6457c120d", "indicator--73eb7d0b-81e2-4f6b-a9a1-c95724ff8ac2", "indicator--bdc4d4d7-73d9-42d5-b15d-9772e427ad48", "indicator--05eccfe4-a45b-46a5-8dc5-dfeb01927d58", "indicator--b42b92db-c173-4310-86be-356bd4815502", "indicator--04bce200-14ed-4cfb-82ea-c7e1dfaefd2b", "indicator--8f6f6cac-d782-491a-8e72-c1217be04ea1", "indicator--02620b98-0e60-47f7-83d4-9f01375209fd", "indicator--df362790-d9fe-4260-b717-409987ad7cad", "indicator--21b77303-d87d-438b-99ef-00a9dafa0511", "indicator--d6002b0b-2171-463b-99f7-ffaf15eecd44", "indicator--c3eeb0c5-bbdb-4594-8db6-3ce71555b40e", "indicator--1c847c91-1f3a-4d6f-8082-861ffdfee8d6", "indicator--d963e0d9-756c-4953-a0ad-4ba9bea88ee0", "indicator--abd1ea05-5c05-4354-94d3-c8d1956589af", "indicator--e7147975-d30c-42c2-8e81-c40bd1038e86", "indicator--52805b0c-1647-443d-92ec-d10506ead7fa", "indicator--69b17041-6574-4795-933f-c84466ff74d9", "indicator--3a0db42d-5b7e-4aa5-ac89-b819f6e42d3f", "indicator--137e5e63-1cb7-4c17-9fa1-16d0fc8828b4", "indicator--3dc8a772-2ea0-46ea-8ad1-74dc247a2eb6", "indicator--9e0ae595-5d32-42ca-a81e-7a593bf528b0", "indicator--5d2eef31-9662-4271-aa5f-81475e17abb3", "indicator--634d7551-a05a-4a28-9e15-c732f98d3e50", "indicator--7e8c8899-ddc0-4373-a4eb-9cde36e7f655", "indicator--2363d895-322d-4764-8ee7-7ba5b163a0d4", "indicator--af6e0f3d-0b39-499b-adaa-bb008104d01d", "indicator--684481b2-539c-4e09-8d97-0d6cf368ac9b", "indicator--52176d98-e41d-4ded-81a5-1be704eaffb5", "indicator--b9f214ee-7635-46a5-914c-2af798085661", "indicator--0005df76-4eee-4c96-87ec-1266ead18605", "indicator--37a719ea-153b-4b29-bfc6-60a0e756c374", "indicator--a71e5770-e48e-43fc-ae11-3bdfd314896d", "indicator--343ef89d-705e-4ba5-a49a-b4620ebc832f", "indicator--1f6d71da-3b57-472f-8817-5caeac7dd2aa", "indicator--377ef238-d084-4a70-b855-0beded04286d", "indicator--22ba7433-2779-48ec-a309-1f2a697983e2", "indicator--d666f02d-4c58-4ff4-a3e5-3db759001f42", "indicator--12701b29-c914-4376-9a16-e3ebe7cb6d8a", "indicator--487e41c2-0014-4c13-9abb-73c88a997389", "indicator--7c70aba5-00d1-4344-a1b6-ee5a3dd62cac", "indicator--7f2dc20a-8288-4b4d-84ed-ba80589e3a6b", "indicator--346695a9-4cb7-4bdc-a356-b98700b2d43b", "indicator--cd965984-fb3c-4a13-8c29-faa335f0b631", "indicator--c750e641-657e-4f01-a95f-0b7ff539986b", "indicator--886448f0-0987-40f6-8f65-1404aa1a307f", "indicator--b11dd1ca-da84-4d17-b7fe-84ac443ecead", "indicator--58a35d8b-5d19-4ee7-9776-b8ed0694657d", "indicator--25757ac8-5b9f-4909-88cc-d1ddbce574b4", "indicator--de2ef71a-ee06-41ab-a7bf-75bed27f2476", "indicator--23c74b97-719b-454f-bd2f-07b2db70424e", "indicator--e071086b-2834-4279-9c1a-0447a9367282", "indicator--11c51a8c-88a7-4cc1-8a87-173c9d3f8284", "indicator--79cb6dc3-543e-43fd-a3b9-5edbeb181181", "indicator--df598309-bed6-4644-ba03-5de8a5083224", "indicator--3895a67d-66fe-44c5-abbf-b2d0a3f682f9", "indicator--3b989c28-1607-45a4-b228-6a77a6023efe", "indicator--f8a03270-8b21-4848-9743-2f9db07bdef8", "indicator--dd2077a5-b883-415f-bd52-e658b283d324", "indicator--ea525b80-ff9c-47c1-b03d-6f8a0ca602e4", "indicator--bc064c54-ab52-4ba7-bbbe-f9a4b4bd864d", "indicator--3571cbe6-842c-4645-bc66-bc6a13e4545a", "indicator--399f12a3-8d52-43e7-a712-f40a2dee5f1d", "indicator--36380d7f-319b-4735-a1a6-24a24ce96200", "indicator--9b8fc3ba-ae8f-4e8e-824e-d4ed3b869cea", "indicator--6cc37fd6-2b37-400c-bb40-b9af844c561c", "indicator--1e8423d1-09b2-40a0-ad00-a26def5e359f", "indicator--88288f4c-7d45-493e-8e3b-aae85133782a", "indicator--0d6d9c19-a81d-4746-81b5-69a4c02ce354", "indicator--c0fc0503-8e29-4fd3-8ded-95c9bc0a380c", "indicator--b7c7e6d5-e0a2-4810-961f-6d28dc0a24d0", "indicator--4736528c-907b-4396-85d4-3d63c72a2d85", "indicator--141e3e87-eb86-42c2-bbde-bd4263536c9e", "indicator--2d2df1dd-0a1a-4f82-9435-efa37b09f76d", "indicator--b2e7d9be-021f-41f7-9f80-eeba0f6c51fb", "indicator--d5e4dbc8-8357-4fa1-87b7-031d21e9787a", "indicator--80ea1918-a279-46e7-81f2-2b56762f21a8", "indicator--8d4dd479-a3c4-48be-8a6d-85dd40ffbecf", "indicator--66d45714-f6e0-4195-975e-f145bbd8cb80", "indicator--b7d9a78f-a0a8-48d3-8da1-c0e91b3c79ed", "indicator--bdcbf4d5-269c-4d82-8909-7151c363962b", "indicator--1c33fcfe-6b0b-436c-839e-e2f6945efe92", "indicator--32734d31-782b-4289-8b44-106c51467833", "indicator--823ef1d2-478e-4dad-805b-1ef2030c4c26", "indicator--7458dcb7-8c5c-45c3-b55a-894c2799e785", "indicator--7f91390f-04ca-407d-b2ae-a42683eb9b9e", "indicator--b7cc9da7-fd0c-4c2d-8ba1-514084438362", "indicator--e7b48505-21e7-4945-ba14-cb92fe75c9a2", "indicator--e694e122-26cd-4fd2-a462-bc4e80b9e50d", "indicator--5b103b95-8d84-4a08-b3d6-858fc34a1755", "indicator--9ec4597d-de93-43f6-abb3-56961456a95c", "indicator--468115e7-d6d9-4d88-8d43-bd0f4c8d3181", "indicator--bceb1528-3b7c-489c-a71e-57407104994f", "indicator--e0e5ad62-461c-46bc-b333-1e9e25e6a85b", "indicator--eeed70d8-759b-4037-99e5-9612d2cd7489", "indicator--560d08d4-a606-40a5-8872-26c175877821", "indicator--69976a33-4466-4cc6-9308-49b2261fd1ab", "indicator--716f897d-29d3-4032-85c7-fdd724f52f69", "indicator--febd75d2-cc8f-4c25-a040-4a13e2e6f3dd", "indicator--c3e99cab-2a60-4e95-99b2-a374d70a8405", "indicator--34c482d9-fac6-408c-ba2c-d537a832ca14", "indicator--c4e32148-91ea-4f1e-bd0c-47c630a7df25", "indicator--25c57f2b-cc00-4605-9b2d-468baf31edb3", "indicator--9254ed46-f94c-4cd5-ba7e-a0b42f49fb24", "indicator--590d79eb-190f-4a2f-ae55-aff5939ef7b9", "indicator--6ade6eb0-0ad9-4f8e-965a-69d650882656", "indicator--976f14ff-0385-417d-b354-f74c2572cf92", "indicator--9163ab03-c60f-43e9-b438-b40cb114e4c5", "indicator--6e400ad9-fbf6-4f39-a384-e69486947c3e", "indicator--a5e0c348-064e-45f9-85c0-8286f935f55a", "indicator--6561fa06-c640-4c2c-830e-6741f29f849b", "indicator--38fd71d8-590f-4f46-94e9-ff10dad66ba1", "indicator--e4916aa5-457b-4b44-aace-f7b30d5b78e2", "indicator--c60a5ffd-c158-4d53-a94f-2d8eb0d18473", "indicator--97c9a1cc-5dba-4c68-afd4-6c0c24460ddc", "indicator--9af4d228-66e7-4070-b3a2-7ec0b10fa252", "indicator--bc410274-08ba-4bab-9e11-5627465feedc", "indicator--9812e4c6-9a4f-4497-8639-f7aefb7b6830", "indicator--bafe1b4f-4af9-48e5-aaaa-dfcb642d93a0", "indicator--0f28fbf4-9b58-4246-abd2-00597e6aeb21", "indicator--0eb1a221-07a0-4308-9ede-3329838c2ae5", "indicator--acdcb32f-fbe3-428d-a4ac-2476d4f60287", "indicator--b03a89d7-cb73-4b97-bfd8-fd2fedf74400", "indicator--771e3cfe-52e8-4fcb-bf6d-67ad9938caa1", "indicator--991d7c72-0e01-4173-b09c-309a29134815", "indicator--1a89b19e-82b3-484c-8526-92f987533661", "indicator--b007f931-574d-4ff2-9d3c-16651c2cc49b", "indicator--c4c20df6-cd1b-4dea-a51f-1ae3af7187d5", "indicator--d620f124-8f43-402f-8081-d72c87c04296", "indicator--2e159d38-9864-4cc0-8f87-6dcfd8b1c830", "indicator--b1e94884-d2cd-41ad-9268-6f671b81b7ca", "indicator--a3d7f402-1eff-4abe-92a0-d83e4126267f", "indicator--c5a07b6f-203f-48f8-8f73-515ff54645c8", "indicator--53994d64-5b34-4978-b69b-10f2e220e056", "indicator--06a52071-4176-4d81-a572-d993975739ca", "indicator--1489a729-95a5-433d-8a0f-ee43343a68be", "indicator--ff1d7152-6ef2-4e1b-a2f4-6d91bf4dfefe", "indicator--28229780-6329-42fd-879c-cd1152107d1b", "indicator--2fbbd3e5-207d-4a3d-8a6e-82dfe066447c", "indicator--ed65e716-8b97-4bd0-91dc-ed96445028b6", "indicator--5cd85456-6491-4060-bcb1-427ba09ce903", "indicator--7fc9d6fb-88e1-4a3b-b04e-736cd34f952e", "indicator--392b2ff3-7d59-4233-8879-3c442873eedb", "indicator--2d555553-a610-4b56-80b4-b3d7bc614f82", "indicator--2a61b1b3-a50a-4228-afd7-1f0d7c24e79a", "indicator--afbe5aae-35c9-4fb0-992a-5cb7f7a421b3", "indicator--50ce46eb-8277-44e9-ad3e-e963f69eab78", "indicator--8c47e122-26d5-4a35-8444-7ed8bd328b77", "indicator--fc6abe4f-3fea-493a-a1ed-7bdbd4c23fdb", "indicator--b8ed383e-0339-49d5-80f9-1994956cca64", "indicator--421e742a-7232-4ff6-8036-b3e880ef30cb", "indicator--bcec21f7-8b80-4e0f-82c2-9f7e999dac61", "indicator--21328ba0-b288-4bc9-b645-8476fd1b00da", "indicator--d2b9e866-4240-4b61-82cb-956b637c7a64", "indicator--ba842b07-430d-458d-a02d-d0c5251e4a77", "indicator--a186d531-9654-46cd-9626-70e2a835650d", "indicator--decece20-9466-4e75-9ef7-9b137838d491", "indicator--0c5fd7d6-23cd-4eec-9282-45df030826e5", "indicator--4848e35a-9a0b-4270-99ab-e5b834c129f5", "indicator--b0324ed7-6664-415a-9cf3-ce01aa1b6a24", "indicator--a4a985f4-5c97-4aea-8641-ced6b9d710de", "indicator--0155ad96-b049-4ab6-b2fe-af3abf631215", "indicator--dcaa4913-c123-433b-8946-ff36756b76ee", "indicator--bab654de-cb62-4854-86ae-68976dfbb026", "indicator--4e53c914-784e-4b32-82b9-52355f36d595", "indicator--7a2bdc27-a02b-4342-84ad-51ec349195d9", "indicator--943136f3-8f34-4d74-91e5-096f3298e04a", "indicator--615757db-5670-4e23-b8f0-02502461e770", "indicator--7dfc44f7-c599-487f-aa35-3c5199c28855", "indicator--59215fbd-a797-4f4a-9b3c-e1c6e3a84d4d", "indicator--0340e928-0c7f-4ad2-8236-da6502132bbc", "indicator--d2d61517-3133-4a61-9e06-0e6deb47c724", "indicator--df7fe555-bc53-46ca-b7fa-c95c20e96865", "indicator--a09da859-975b-45b0-8688-615cc9598b0b", "indicator--b586e7c8-61ca-41cb-94d3-65b5b6f15a7c", "indicator--04b290dd-c606-4ed6-ad2d-9edd754a761c", "indicator--d3a56eba-b34e-4f04-ab86-4ff3af9785c4", "indicator--c4b8f970-6f2d-4a92-bbc6-5c7b404f7375", "indicator--b4eaeeb0-4ea2-41fe-a039-38efc38ff78f", "indicator--b5603241-747c-4f4f-845e-c411ad126535", "indicator--9d79b5c7-0aee-4c54-87fd-3854d8c33407", "indicator--1a45d345-6aa8-400c-b050-181d7f8df284", "indicator--191e0cba-89f5-4dae-bde4-0156d75706c4", "indicator--c7d90290-88cf-4b02-a8c0-16ae096379bf", "indicator--a0e51ea3-5d14-4fe3-b19e-667fe74d03d2", "indicator--6f53081e-b2d9-4aa4-9210-54f54faf1886", "indicator--008553e5-506e-482a-a509-cbc30d6d0a43", "indicator--81254dd2-7140-491f-b092-ba2f0fe2c876", "indicator--7cca97a6-75e4-4211-9f58-f4ba45cab0ff", "indicator--c6dbca37-c9b8-4906-8894-7a002cfcd8d2", "indicator--7df4939c-5ebc-44b2-9056-da546f649a54", "indicator--736da479-71bf-412e-860e-9152956a1f86", "indicator--e9894f52-b6ee-4ab8-b5c6-56bf53f1996f", "indicator--0622c2ce-6bb4-4b8b-9013-9e1b4f1a5970", "indicator--b0f01395-3ac3-4608-aede-0115c83abcf9", "indicator--592dc5d5-08c0-4b33-b515-cbb3071674a7", "indicator--08075aae-e403-4eab-973d-7a0602bfe0b7", "indicator--bf9adf64-f71a-469e-a143-68542fe2ea95", "indicator--7d05d02e-ebbe-4ed4-b62b-c9976eb28bd4", "indicator--07843e30-be8c-4b9b-a4d0-44f6f1e59f0f", "indicator--6a9c941e-b036-4759-99b8-4f107a7bef07", "indicator--a8442082-6818-4261-af8e-d2c5aa88c584", "indicator--c841724e-e436-4cac-8073-3b9a937024de", "indicator--dbef7cd6-7106-4e35-8493-5deed9870301", "indicator--9f1afcee-cccf-4aea-adcb-4e38a3522184", "indicator--cf3d7c38-6b15-4be8-8432-3886edf7332a", "indicator--04c13d27-97cd-42ad-8a8e-acb1f6ee09a1", "indicator--1bff7cdf-89d6-4577-996a-aa1728f7aa27", "indicator--36c97f18-7ef5-4af5-ba93-4db5d260a849", "indicator--345ae114-c4aa-4773-9faa-767e0803ca8f", "indicator--677f06fa-6ce7-4487-af68-f4f970fae05f", "indicator--5fc83cdf-bd65-4199-ab24-e7d407b60bb7", "indicator--d89c019f-d3fe-471a-9334-e4b02b25c91a", "indicator--3dc7d92d-b10d-4615-ae1f-d7e78663b534", "indicator--944e5c6a-326f-4706-87c0-a0590c4a163c", "indicator--9b849601-0b17-4843-a541-6a109d393537", "indicator--c02b5393-da2c-41fc-bd13-0e0861e73e6e", "indicator--a2dded52-2978-4777-b1f0-3c27cbe3f42a", "indicator--6778ae83-f5f7-4a21-bf8b-810e375b3297", "indicator--8bb49f79-9f02-4bd7-9253-d1897ef58095", "indicator--412bb345-f939-4782-b60c-82e9e355fa6b", "indicator--53528acf-aed6-45b3-ab72-68b25d995e7d", "indicator--f523f7cc-0446-44f6-85e0-604535f847e4", "indicator--cb2feac5-b5df-41ef-95e2-f9f94ac248e0", "indicator--64f48ae9-b15f-4db1-8f1e-00fe94d71d79", "indicator--5afa4177-8cb1-4b33-848e-18673763f185", "indicator--652260da-04d2-4a39-9ec9-4e197942e7cc", "indicator--bc176dc6-b86a-4bb8-a011-6889f1193988", "indicator--e4db22c1-ff96-403c-8f9d-b39faed88f1c", "indicator--428fe4d4-f1d7-4bb4-b309-6169e0ff4c53", "indicator--86930534-1e65-45d6-b064-04d8643dcafb", "indicator--01aa9f21-7c5b-46f5-b4fd-0150473df729", "indicator--c6c1cb27-d5e1-413c-84e2-c3f5a5ee034f", "indicator--fa761ff5-df7a-4464-947a-a3d5118de18f", "indicator--107e6cdf-9454-487d-bbb6-18c9f4531e9b", "indicator--8fe6292c-47ef-41ce-a115-94f132440374", "indicator--86729896-a26e-4e45-a2dd-b8b72a3d092f", "indicator--86afe67f-f4c8-4c8e-a7ac-0b506d52ee5a", "indicator--954b67e7-0de1-46d1-8989-40e3ff416d72", "indicator--2997cd40-5fae-4ce3-ac57-1b441400f1e2", "indicator--0ec5458b-bc81-4518-99cc-38d4266f450e", "indicator--3fbc9a99-e106-46ef-aa94-c62509dae101", "indicator--61796aa1-be1d-48a0-98aa-eb54d81d30c3", "indicator--8e252233-24f0-41d5-99d2-be40cf7b2cb7", "indicator--b73c47f0-ba35-4e8c-b84b-8c98c2d25dfa", "indicator--025a6ec6-0fe2-4ae3-ba68-06e01e3dc98d", "indicator--0537e403-01e1-446f-9768-05505f950d22", "indicator--4c9ab7d9-0666-4890-8ed3-c070a4d65088", "indicator--9334009c-2969-4ef5-bb8c-0e9b8777bdff", "indicator--00bbf5f3-e560-4efb-b68b-afdae5da75dd", "indicator--a1aa50fb-c215-47fc-b8f5-9fb9e5c19638", "indicator--97f7b34c-365b-4da2-b601-851d1c1b5aa8", "indicator--fee700bb-ba56-4abc-8959-9fd9f7fa263f", "indicator--8b46df3b-b341-4145-8ad2-b22393f46409", "indicator--9a036d22-6d8c-4235-976c-d42c230849e2", "indicator--6ac37376-57b9-493f-82ef-f8e9d24cb7d4", "indicator--a0cec21e-6bf7-42a2-8ac7-4494339cbc0a", "indicator--68085305-4e3c-4097-bfd1-74326ced42e9", "indicator--bafaae23-7947-470a-a631-4b9b4cd70d56", "indicator--0ccfd5ee-07be-4dc8-8c9c-045ad2732fd1", "indicator--d8ca55ad-d6b8-4cbd-937f-83188ad13179", "indicator--4e81f8f5-f4f0-4942-8d3d-441206c1ce43", "indicator--ddb3aa23-8224-443e-8b58-dada1898ae38", "indicator--c1bd3c7b-186c-4ea0-8772-c5b1a9d3dc47", "indicator--c3c43266-a558-44d2-a454-30d8e38f7ac0", "indicator--5de53cc4-25b5-429c-beb7-a46992765b87", "indicator--2d0fe2cc-46dd-4c7d-ae20-1e62feff5c92", "indicator--a6085e48-5aa5-4d8a-abe8-abcc3c056503", "indicator--532dc3fe-6974-4b26-9643-d897af7f66ac", "indicator--8c633575-c067-4e11-a032-2648a4632232", "indicator--369e36b6-6509-4c25-b29a-37a4e61829d5", "indicator--6441f32b-70c7-4179-96ea-7aff966962a1", "indicator--c789285d-4ece-47d0-b1d2-9e273df0d4bd", "indicator--155123b5-8b7e-454c-ade8-a38bf7338073", "indicator--eae3a542-d55e-4354-a727-04d126876b6b", "indicator--4d9d4b3f-cbff-4f7a-9548-dcdbccfbc0f1", "indicator--56f396fb-1355-402e-adf5-96f81f5ef25c", "indicator--2a39535e-dbde-4d82-9d81-a1c54f1070c2", "indicator--ba36f6fc-24ef-4349-8d4b-6d88dd3ff883", "indicator--ac651849-962c-40bf-8faa-e7aeddf585fc", "indicator--a41d3886-e3d0-4131-b5cc-f4e75eed97ec", "indicator--27beeabb-5910-4b6e-880c-dfac8a91626b", "indicator--623a289d-939b-41bd-9d60-881555583d50", "indicator--9d0d56ac-1a15-4e5c-ae62-f1e8b199bfed", "indicator--a33897ed-8b6a-42e9-81e7-bd3fe9defb12", "indicator--0301f650-f2d0-4aab-b9f8-d6756eb8c640", "indicator--b60d3d90-984c-4d40-a48e-60644cb83388", "indicator--3c9459d5-5e48-4dc7-b252-dd4651948fc4", "indicator--014a3ebe-c382-41e5-8bd2-e5cd131017aa", "indicator--e1f351f1-6786-41bb-b878-c7a30ad46beb", "indicator--a49e996e-80c8-490a-b535-433f070e3589", "indicator--e6cc8e49-a3b4-474c-b2b5-dff25ff83b58", "indicator--b1aad659-1620-41c5-a8ed-0cb002bdb32c", "indicator--68385952-e3c4-4a88-bfc3-b9c5c34780a3", "indicator--bf48732c-e7fb-4655-be32-c2b3598a8d41", "indicator--3c8e1ee8-72a8-40e2-99b2-a774352b1d48", "indicator--452c0216-e2a0-4f50-91d2-b464ae75dff6", "indicator--27b69d63-3ff5-490c-8814-3ee1b53edb57", "indicator--29ce1e2c-9033-4a9b-b2f1-571a9178130e", "indicator--94fcad04-13a1-4b85-8f9f-b746bb7b62a0", "indicator--cd9b7aa8-7fe5-43d4-aeec-a15bebd363e6", "indicator--e33e47a5-e892-4a10-b42a-61b1da8dcf83", "indicator--6b9d2797-a2b1-4c3a-a21b-1773cecb5304", "indicator--6c1e0ac8-2a38-4833-92bc-c69515d0cbff", "indicator--88d34cef-a343-49e6-a6cf-a5e52e327f48", "indicator--f7a70912-2640-4f7d-b48a-8ba7d1fee83e", "indicator--80f15709-dce9-41bd-9192-a3389f25e0bd", "indicator--1d76fc47-636b-4d10-9913-0f056101b87e", "indicator--a35de694-7574-4272-9a4e-54c9bd797f0e", "indicator--af1a780b-dd45-4eb5-aeb8-65f6af660a95", "indicator--27f78536-0909-4eaf-9a38-d518f4c239fa", "indicator--90e5b712-fbe4-4c6c-b5b0-495c999e8afd", "indicator--785c272d-515f-47db-b25a-5c9018943bae", "indicator--974abc74-3a61-4357-9a08-6c828b778a45", "indicator--05ed32f7-c505-4ea8-a411-b850dc3bf4b7", "indicator--631af33c-bbda-4aab-8dac-3c41a130d555", "indicator--09d18e7f-1416-4505-ab12-a0083fbae091", "indicator--e5ee0546-0a5f-431b-861f-00412b67754f", "indicator--a5fbc66a-4678-4d45-bf70-9824f67795bc", "indicator--fb44c031-d069-41b7-a64b-df41e92b7aff", "indicator--71e9e4e5-afde-4c46-ac62-5d7f715cd451", "indicator--fbcc9ff1-1f2c-4767-b809-54ecc90fcab8", "indicator--881e5013-f806-4b9a-bc69-f024a0a4c781", "indicator--81119cb1-e4cf-4585-84d3-5b0ddcddcc42", "indicator--2397b865-94f0-48c7-a1bb-79c02cb0e045", "indicator--bbeaa1a5-8b40-42d4-b9fc-f0b72ef15be1", "indicator--c11ae0f5-9ba8-45cc-934e-106927c3847c", "indicator--c260fac6-afec-4585-9917-08cd6ee98bd4", "indicator--733a7fd2-4ba1-4415-86f6-8766f97198eb", "indicator--5ff16e01-6a79-49ac-a117-4da22e30a336", "indicator--f0289399-f62b-4f1a-ad70-e5df70c326b7", "indicator--99284915-962c-4c93-b94c-21efec9f36d3", "indicator--be826b58-26c9-494c-93c0-b76a4c7f1275", "indicator--8681e74c-d79b-451c-8d89-05641a44a0ac", "indicator--e0a4b66e-d989-498f-9d7b-40dca6e58d68", "indicator--b2fb7c3f-1ced-47e3-b514-1498033fa074", "indicator--200871d7-56dd-4386-a2ca-dc9e1d33614b", "indicator--57751a5f-fd99-458a-adbe-25993fecf9cc", "indicator--82432440-af30-4ea0-9957-b34e0316307e", "indicator--a04267b8-74c9-422b-9fe2-b7e244231b14", "indicator--86a89ee2-8018-4831-9fbc-2b15f6462a41", "indicator--2d81d58e-a166-4a42-a349-ade05982c9f5", "indicator--dd9fac8a-a451-40bf-b068-c059f544b2b3", "indicator--5c4ba52a-1680-4303-aacb-77f528733ea3", "indicator--b0cea5e0-abe8-43f3-8104-d7c89fe928b6", "indicator--42cba90a-5b7b-4f77-9601-26f634de9275", "indicator--c0ed912d-0951-483f-8f5c-23e9fd8236d3", "indicator--3cab95df-1ed4-4eda-8870-54ebe2e98177", "indicator--4fe5c1b1-36d2-477c-9a22-50c98e9f3d93", "indicator--3ae8ed87-dab1-4ac8-ab23-ec91dfa55e5b", "indicator--26411119-0500-4455-9fa6-78565cde54f8", "indicator--45b7615b-87a5-494e-8b43-bc8b871401e7", "indicator--42d3d333-9522-4a35-b08c-81d04afafc93", "indicator--f65a8daf-3f3f-4cf2-87ac-34d98ec6b015", "indicator--f87b5485-f3e8-42b6-9274-a9828604c151", "indicator--bc7a63ae-d5fe-42e5-8059-f548860d8973", "indicator--69c667a2-ac59-40ec-866f-e2f9e11f2137", "indicator--9839698b-80ad-46c9-812a-4862ddae8c76", "indicator--8ad4409d-afee-4356-9be7-e3e79da8e32f", "indicator--9bcf8ca0-8f19-49b4-9e3c-e4ca01df2d39", "indicator--17424fde-e582-4816-92be-c3d498573a03", "indicator--3505f61b-b1bd-44a6-867c-06cd19aad356", "indicator--0b77a1ed-655b-4a3b-8e48-1ed0222038c0", "indicator--5189fd26-0b99-4b99-9243-53f1f9e43dea", "indicator--c1f0f79c-fa5b-4ba7-a0ba-99da30c8c715", "indicator--b458f8ed-360b-4bd1-a27b-850e7a5e365b", "indicator--57e3d416-d2f6-4725-8b49-cae170e0a30f", "indicator--11627521-3ab7-408e-805d-6978710e2423", "indicator--76392fc9-5aca-4592-943f-af77be4aa88a", "indicator--de64e503-7e27-4bd5-bce1-84424372784e", "indicator--d1d76920-3658-4d78-a1a9-68604552f588", "indicator--d5e0d55f-1946-4f2f-890f-9abb49024a58", "indicator--0d95c2f5-59ee-4692-a19e-29194f926da0", "indicator--d448b83f-5fc9-4174-908c-c5df91263349", "indicator--b776b8ad-5b35-4f9f-b49b-419cf789188a", "indicator--b6e1e896-5898-4b0d-b719-8eb14128e23f", "indicator--1c99dea8-2c38-4bda-8cf6-e0723dec6d9e", "indicator--7cae1df6-dc59-4717-8982-c14922ee9475", "indicator--7261da98-9b52-4d43-b5a3-ddc478ba3fc9", "indicator--2c1b9e07-b785-43b0-96bb-15b972fae93f", "indicator--1c3724f4-6454-4409-81bd-e45bfb3556c7", "indicator--f69dbf0c-e655-46ba-bce9-b70224779d72", "indicator--996ce9df-aa85-4306-9cea-3ec39c88f5b4", "indicator--bdaef4bf-2ae5-4622-8eff-ebaca8c9b07a", "indicator--1432fc93-62aa-462f-ba42-30c0843c20b9", "indicator--296b395a-11ff-456f-88bd-8d4fa50be612", "indicator--a8249ee1-7f7b-4c57-8572-e4321b3bb887", "indicator--659290bf-0734-483e-ad0a-8c3c3d9869ef", "indicator--31b40d89-c973-4ed7-ab55-59d99fdf9eeb", "indicator--74ba8189-c56e-4a7d-a304-55067b552589", "indicator--ebcca944-276e-41a7-9790-619e00c29bc4", "indicator--cb5513a2-b863-439f-8da7-eea09ae8dcc7", "indicator--17c34fd9-5b1a-47c0-a382-1d0b51c760c9", "indicator--3f556495-347c-452a-ad62-4455ffd43f2f", "indicator--68bb166e-2c35-47d7-9ba6-35de2af6c827", "indicator--7cd52584-c955-4060-a1ee-1a608e394471", "indicator--47080c6d-cd73-4c16-bd95-12e06cb1d98a", "indicator--2db3239b-90fb-4e94-9df0-510b8bf7a1ef", "indicator--057208a7-9869-422e-a14a-4aa3d6423741", "indicator--8db07760-6f8e-4151-8d8b-66b37431ff33", "indicator--4e7fa56e-8c76-4bc5-b7bc-ab1a645a1e2b", "indicator--4175d518-332c-48ab-92b5-f432e77d32af", "indicator--aa809fd0-d1d9-49a8-8253-29d37ac4e4f9", "indicator--5edefddd-d00f-4734-b269-49100ef7fd29", "indicator--9bcf2edf-9e82-4919-a61c-9026ba4c8eae", "indicator--7a6ff8e1-724c-46e9-9b6b-e169e0debfed", "indicator--69e720ac-80a9-4250-921e-a505304d0cb3", "indicator--9b749163-fd87-4a52-9b6e-bc82a369f6fc", "indicator--f5db9e6d-03ac-4541-8e14-25aabe9fd3d9", "indicator--c9c504da-bd41-4f48-846e-69d1cf6c49a9", "indicator--a224928a-4942-4d35-a56c-afd2d7c22397", "indicator--e189312c-d8b6-46c9-8cb3-248596cbbacb", "indicator--88c42256-0d1e-4e8b-80d7-1457f6e603bd", "indicator--41ad64d3-de9e-439f-b3f6-e69c58711622", "indicator--0fb82420-6721-4a24-b97a-0e84e0b97234", "indicator--b711adda-06ae-42ed-b1e1-58f6d9413a50", "indicator--a5f2edbd-62bf-49a7-a907-9c7061659adc", "indicator--f157d077-ed40-4aff-9a6b-789864ebd01f", "indicator--57cc88c5-c4e2-4f07-a50e-d98930cc418b", "indicator--3b609a63-2566-44dc-b860-1bd343c0fa52", "indicator--473c9aa8-8de0-43ea-8077-7e6a3ae7a1be", "indicator--f3cb653e-2bb1-4fd7-9671-c8ef02b87635", "indicator--27462914-debe-4f85-9210-4b8891ea0b0a", "indicator--4b573f4d-2a42-4fe4-8298-f57852f9fec4", "indicator--efa2a4da-f4ab-4951-9bb8-22a1e5d130e4", "indicator--38dd25c4-23e6-48aa-a4c1-78b7d341982b", "indicator--663050ce-6a9b-4879-8214-8e591c208c5f", "indicator--9aa2c6b7-6417-4329-8d10-30896fd70a14", "indicator--1c839fc2-9472-4507-9889-517489bb57bf", "indicator--7bbdcb49-539e-4e31-a9e8-2ea51400048c", "indicator--4410a8da-9dbd-4eb1-91bf-30ba7f61d918", "indicator--ed3f9405-a6ed-4f5b-8b41-3d13255d89fd", "indicator--53a59f21-a504-43ad-9739-97de8c8622ed", "indicator--fa712e09-8fbc-43bd-a0be-ff19caba7a8e", "indicator--f1d20d17-bd13-4749-8254-f8d0fe7da0e0", "indicator--72734cbc-d3d3-483d-9fcb-553f3b9afe2b", "indicator--180511e8-e5be-43b1-b9f7-43ccee443712", "indicator--3cde4a64-1ce8-4a33-800a-49c1ffa40d53", "indicator--01e0c9fe-fbca-4781-bca0-6a47335ea4fb", "indicator--62053871-a5d1-484b-9546-63a677c5cd99", "indicator--4a654657-f308-4879-8970-084465f341c3", "indicator--0f9e5eca-fe95-400b-9761-0f61677322ff", "indicator--578a53eb-a28b-41d9-98a6-8e97f69a0192", "indicator--013d836d-b9d8-410d-86e4-e96489306dcd", "indicator--0bfac568-f3a1-453d-be1b-5c3c8e54d163", "indicator--4f747866-179f-4946-850d-894c948c6b6c", "indicator--6423b42c-6c8a-4753-9f1a-4cb2f31ab96d", "indicator--6f33ed13-dbb1-420e-b085-4212bc01f99d", "indicator--0efef3ad-534f-44b9-af04-f0a5641241a4", "indicator--5f617e2b-07a6-45ae-be37-ef899db8a0ea", "indicator--043a88ee-8e14-492c-97e3-bb1e080d78a4", "indicator--21e40b2a-a217-4f0f-81cc-be312c2a6bfe", "indicator--a2b59039-36c7-4717-a3b6-e149e304d17d", "indicator--54ef9d7c-e01c-4023-8608-85e00bdaa031", "indicator--60b39506-c571-4085-90bd-795b127d34a7", "indicator--773f4157-c900-4814-ab3c-0f96ab31c968", "indicator--a973ff4c-7d8a-45be-a439-9cc0e37fb163", "indicator--0b3b225e-6368-4ecb-bd60-b83e8189e9f0", "indicator--82c12583-75f2-4800-b1aa-772837773cd0", "indicator--cdab372d-fc0e-4be5-a7c5-ced0984b9ec7", "indicator--6e624451-5428-486e-abc9-9fb0105a6b91", "indicator--56fcf514-25a0-4c0f-a202-8e9c2a3275a9", "indicator--06caa409-5211-46a6-ae59-8ee3d78e7daf", "indicator--d79c4a83-3483-471c-b0ad-d50c5bdbd778", "indicator--91ad48dd-a90b-4034-bd5e-606fce747e28", "indicator--a6ab6c9d-d623-4d77-8b2b-37862667cd79", "indicator--50cc5f97-41f7-4c91-9dc4-28d5f50f0bb3", "indicator--a92cb554-de9c-4854-9629-66a10fd0d580", "indicator--069a3e67-e06e-4ce3-a4a1-0afda0d0c78f", "indicator--c11838e7-dd5d-4bb2-873b-4945225798ec", "indicator--0229058d-884b-48ea-a10d-325034de19af", "indicator--cd8f012f-bd87-409e-b291-c329041db9c3", "indicator--9bb86405-9a27-4a83-a195-d4dd0d89c3c1", "indicator--fcbc2adb-4d7d-4023-ac29-015393742ddc", "indicator--7a15444d-87cd-4c0e-a1a0-b6ddb276d477", "indicator--3352925b-a082-43af-8439-f5e082fe5495", "indicator--4e58599b-071e-478c-bfb1-ed5f71df7112", "indicator--1cb0a668-c37c-4e58-a67b-340f719e403e", "indicator--1f9385a8-18ef-4d61-986f-959ea54fcfcb", "indicator--d9551d4d-5754-435e-8086-9a7961ae16ca", "indicator--e1d92b13-89c8-4a86-909b-444178077da3", "indicator--28a41dc0-264a-4c1c-aeee-d7a9ff72f7ae", "indicator--3bb53f95-cf89-4512-964a-5f0f90cd801c", "indicator--b1bb7a74-35fc-462a-995d-1674d6a2ed30", "indicator--781445d1-e2cc-4d53-a42d-56a11624bd08", "indicator--47333ca1-5250-4237-85fd-303fa336bbfb", "indicator--55160d40-4be3-4eea-8dd3-b4098b3afc41", "indicator--492eeb92-ee9e-4b04-96b0-3624f77d1915", "indicator--f2e37216-638b-4137-b4f2-c68dc1f24c4d", "indicator--2e398ce2-fe84-4099-b533-797a5944c44e", "indicator--7d4b68ae-1942-4145-9ed6-e8fbac0cf9bb", "indicator--abfacd80-bbee-4d93-b498-fb71071609ab", "indicator--ad40dfd5-a041-48b1-8607-16442bf65f8c", "indicator--6f5e5f43-329a-4b50-a123-d7e91098d25b", "indicator--d21993ee-b8c2-4377-a61e-708e0ee78900", "indicator--54f31cad-5d51-4456-bb72-2c1097d981e2", "indicator--ab5a4cde-9e22-4366-941b-41894a8b742f", "indicator--ec69daf2-5049-4fe9-b6b9-02fbb7be4329", "indicator--bb3edb6e-b87e-4e23-8479-b3743bc04465", "indicator--3cb46110-0de3-44fb-a8e9-b79230e9d676", "indicator--7c90aa96-c54a-4002-b6c8-1e5f63ac4dd8", "indicator--33520bea-1b18-40ba-8235-ff9e4b2ea585", "indicator--7e12a107-aac9-4911-9cef-defa203a72d5", "indicator--2c73613e-da03-4617-8a32-a1ec9f5dafcd", "indicator--9e03fc37-673e-42bf-a777-e99f15b0a106", "indicator--02d7b519-5ff5-4b83-8b67-9ff6263f9e56", "indicator--01ff9050-63c8-48f0-8464-6f3d458e2931", "indicator--88aaa2d6-79b5-4bcc-94db-d73cc6d7cf48", "indicator--ece02f25-44ec-4a79-96ea-02fa97ee84d4", "indicator--f5b2c186-626c-47cc-8d6e-4284c437889a", "indicator--ed2bc39c-18c1-454c-8dd0-509a9f063fa4", "indicator--e2fe9339-c1b6-4e51-a84d-4fd6ba3d7765", "indicator--a20bf07a-c6da-4295-bc90-5b298a9ae1bc", "indicator--5c718c34-f085-430e-b409-6867409d2335", "indicator--05748119-cacb-4cf8-840c-72d5ae078295", "indicator--201098e3-57bb-43ea-9908-72f787507650", "indicator--b393818b-915b-4094-b4bc-e66fda335491", "indicator--14bed731-6be5-4f02-8d21-d01feb89cb60", "indicator--7b5711f6-6cdd-415f-99ca-2f3acb376dcb", "indicator--0640081b-fa23-4612-9608-e610ac60d1ce", "indicator--f222934e-6846-4217-b7d1-00828d8138af", "indicator--98dbd656-aef3-475c-8eff-b23d5acd6589", "indicator--9f30f49f-ea32-4373-aa86-fcf329ae8761", "indicator--33222385-0c46-48b1-92ca-6aa73f93288b", "indicator--7cd850de-51ab-4a82-ae3b-96725f302440", "indicator--bf247c14-ef8c-4b62-8554-f35734296004", "indicator--1e04ddaa-9862-422a-b2e8-a979a17ff54f", "indicator--03065a4c-7afb-46fe-8df2-9f1e4e59ceb6", "indicator--63e742b7-de30-4140-af56-5da3c8278d6c", "indicator--4ac1a7b1-2a26-4075-967b-9cddc5e72f2b", "indicator--4723993b-3a03-4ffc-be16-c08ad3617f65", "indicator--34da31e3-7218-413b-8a6b-ec2723d6a6c0", "indicator--8aaf1b53-e240-47f6-a3ec-93c434220044", "indicator--810571b4-b343-4aab-880b-a6b8c2026a83", "indicator--67d20e23-7513-425a-bcbf-3822b17fc73e", "indicator--58018f75-d9bd-4633-9548-bec4e857456e", "indicator--c5537561-979a-4e9b-a547-59d43e7caba3", "indicator--16f998e6-e86c-4ffe-bd4a-f6859a5d03b5", "indicator--79eda129-79e0-44c2-bf92-7ecea487d3c7", "indicator--d097c7b0-515c-43ef-8eae-13e4cffb5ea9", "indicator--9f6324db-4526-4565-8691-8d71faf81dd4", "indicator--42565326-55d4-4f3c-94e9-2193d3719aec", "indicator--0408ce13-67bb-46b9-8447-6d717790b7bc", "indicator--9a132aa4-c9cb-47f5-a1a5-ac6ad385e695", "indicator--41591b24-2e88-455b-920d-59e5d2685c0a", "indicator--bc5885de-0121-4e0e-8576-19d5a4024867", "indicator--e6277b29-1e32-45e7-96b0-f53391bb4349", "indicator--6d47192b-9684-4b43-a571-4c4aaace69f2", "indicator--6a02de2c-f851-4f4f-b96b-fac6c0630697", "indicator--1b789b70-9f6f-4ff4-81f7-f51b6229c423", "indicator--20a62fd9-800f-4241-aa9e-b0b1c5a3d8e3", "indicator--34da07f0-5af0-4fd0-8986-8cd8e9b9627b", "indicator--ee04378a-8a5a-4fe3-96fb-3b71a16e96da", "indicator--b9cd750d-ce61-4b8c-bad4-c07031a3a370", "indicator--145ca21f-33b9-4c65-a212-6040c42c39e8", "indicator--d0f82832-575e-45a8-8062-2e7255907686", "indicator--2ee190b6-d681-4efb-a8f5-ff778e8d1e5e", "indicator--25b7684a-9edd-433e-9e7b-469fddd92f5c", "indicator--f9cd933a-a9cc-4841-aac8-53db6a30a6c7", "indicator--52e70bc9-3e38-42bc-9659-1a9ad5bc88ad", "indicator--9c521c58-1415-463e-a56e-de6b30f929ed", "indicator--f28ebf13-c988-48f7-8109-b263c0beaa68", "indicator--486b26b3-3f12-4a8b-9b96-4aebd6335bc8", "indicator--82921abb-bbaf-42de-acb3-c35e1259c616", "indicator--6074e327-52e1-4665-888c-c425ad8aad66", "indicator--fd993387-3cff-416e-9fd9-2f3a4f40aa86", "indicator--aee6581e-7a07-4134-a757-eeff9b88c945", "indicator--86c1ba8b-745f-458c-90ea-12abfbd66179", "indicator--0f9644e1-b2b6-45de-807f-e2b7fdda87b7", "indicator--c6c9ad81-f208-4a30-b3cb-af5868055cad", "indicator--636102e7-0971-4cda-8b87-58496c55547d", "indicator--c23a9b68-ae43-4c85-b2ac-bb978ae799a9", "indicator--45b85859-5804-489d-adbd-c7a986bbcf33", "indicator--9fc9d062-0abd-4c60-a393-bffb6cbec1ed", "indicator--e023b761-bc0c-4399-bfc8-0534e7b236da", "indicator--3ce14291-769d-40ad-8f0d-2365e1601bcd", "indicator--59f0065f-4ff2-4af0-aae0-844b7e414294", "indicator--372468f9-0089-433e-9e0b-2ead3bdb938d", "indicator--f1977fc2-1e9f-44ff-9c71-4e9a4a4487ee", "indicator--1fe90351-9d1e-4227-b5d5-68a312819e2f", "indicator--f09480a3-ede6-4d99-afee-fc2168698f09", "indicator--2083fa42-5a62-4d5b-99f5-8f74f6f32201", "indicator--1e8060f5-f67c-406e-846c-96736227d709", "indicator--7e761a8b-fd45-4896-a0f5-49917f15efae", "indicator--883fb4db-3478-450f-96db-dd4a22844977", "indicator--8e1802b1-2e58-47d8-940c-6e2a995742ac", "indicator--9aa98c8f-4f80-40f6-88d8-04fc30d388d4", "indicator--0bd8247d-aad8-4c95-a3e3-016af6055528", "indicator--b3b4192f-f402-46c0-8f4c-d643c340294c", "indicator--b1ea44fa-b085-4f11-ad2b-ab8acc9517e1", "indicator--0c37df20-ec35-45eb-bccc-854c1024ad17", "indicator--5ca9e15b-71fb-4472-872e-e28647f22e1d", "indicator--cad320a9-55ac-40a4-a214-8c33a90a76d1", "indicator--778a2a8a-8e52-4c25-806d-c72ec47e67ae", "indicator--592c7f84-cc89-4b6b-ad7b-e52c29cd3845", "indicator--f24a6964-a0c1-4ecf-809d-1ddd16f4acbf", "indicator--f22eb626-aeca-4054-9d3a-c40cf1ce9832", "indicator--4109c9da-af7d-4643-ac3f-d4557818f175", "indicator--2b7c6af0-a5d0-48f7-84d8-0abacd7a4b6e", "indicator--44fa18a5-c0dc-4e43-ba94-e12ce410e075", "indicator--bf5c49dd-a24d-4c94-ac4d-f03ec24cf936", "indicator--b25271a9-e2b7-4a7e-a83c-8dc3d4f1ce11", "indicator--8cf405ff-8fbf-40b7-a80a-eb0d09d32ffd", "indicator--9d60f6ae-2d58-4fe8-99c7-99c858b67507", "indicator--6c492474-21ec-4ee2-9567-1ddd1b7eab87", "indicator--1cc1ba5a-3faf-4b0f-88a4-dc7b3339d010", "indicator--fa49ecfe-8530-4193-b2e2-4caf2cd0128a", "indicator--a78f7b86-5741-4558-a9e2-a13bfd681c3d", "indicator--a84f647e-5a53-42ad-9ee2-1f17249b2391", "indicator--a8c200a3-4dc4-4804-980f-b7dd9173f5c6", "indicator--ddfcd01e-6085-4f52-9542-5d12303430d4", "indicator--9ca2f618-00a3-46e2-a497-42e57a2c34c3", "indicator--09ace2c4-48f6-46cd-9f95-4e2fefbde863", "indicator--1f20bd9e-76ab-4371-807e-800c99aff20d", "indicator--dd4f8012-b708-4070-9732-4053c6497992", "indicator--3f4c6827-37ae-4cb4-b5a5-6c3440f9ca7b", "indicator--c887853f-74ea-4a77-a756-0733caedb39f", "indicator--8e70ae66-361d-4794-bbdc-b4cea54a9a57", "indicator--c7d197c6-2449-4a54-8a9d-ce119cd1612f", "indicator--01a4a600-1345-42f6-9812-a93506951946", "indicator--8beb33ba-41e7-4556-ba03-5ef07a755b64", "indicator--c32ddbb6-3c44-496a-bb83-ac5592d5013c", "indicator--086976ed-353b-48a7-84eb-4f5272460d8e", "indicator--c5fc6ce6-cf7d-424c-af8e-ee8bf7d462dc", "indicator--07035664-44ba-467d-98dc-63912b908a78", "indicator--184adb94-dd54-48f7-8bb1-8f2c82a2030f", "indicator--bc383e0e-9d9b-491d-ae89-8daf6871c138", "indicator--571b8338-2aba-4b5d-98f3-29f05b13adb1", "indicator--206ecbdd-4291-41b8-b745-5a22f9b56b1c", "indicator--7a545733-dbf8-4ca4-a6ae-fc6243c575e3", "indicator--2af25115-f7de-4487-9bca-8001f3f24d59", "indicator--28faa548-61e5-46b9-ab72-dc5f3fafd056", "indicator--3e75a97d-873d-4f26-a457-75c4ac8dc462", "indicator--50659fae-9001-4c3e-9ee9-26cb4dedc07f", "indicator--c05bb156-6236-42ae-9052-703a43f59dae", "indicator--fd6e5abc-78b3-4dfe-8c30-4dc0145648f4", "indicator--5c850cf4-6a62-4df1-a039-45899e1ea72e", "indicator--3cf99d67-01c2-4b2b-a69d-19d535aa17e0", "indicator--b59fd803-1b7d-4a6e-bb38-2c81d54efd49", "indicator--7f958846-aea4-486f-815c-a04848d1c8ca", "indicator--96a0ab3b-918f-4df4-84c8-6afb4e557dcf", "indicator--36e47ca9-b275-4c1f-a087-23a79711b914", "indicator--c1e7b692-049d-4942-a2df-fe257dc381e9", "indicator--a3e3aa5c-601e-4fb3-a6e8-7608698470a8", "indicator--b63e4fa6-1819-4dfb-a1e8-dfdd6b0020bd", "indicator--9232d51c-6e1d-4c3a-8e6e-bd1d075510ca", "indicator--5b0ff485-32a4-4a07-96cb-ce47dcfc8ea5", "indicator--cfcaafe5-acaf-4e88-a58e-d8d23fb17caf", "indicator--f9c9012e-a723-4017-83da-fbba591794b9", "indicator--6659ec22-ada6-4821-9b01-3607fa5a4720", "indicator--04e675d6-0f7b-4496-815e-49151e0c4d59", "indicator--6c97ef7e-126e-460d-8106-4f2286733f25", "indicator--9f847f89-ae87-4df8-b63b-32f2c4189d22", "indicator--e5913e41-7fb5-421d-abef-fc1b01c630a5", "indicator--b7f01059-d315-4336-8ff3-7771f8a40429", "indicator--7e017b43-4fbc-4172-9bd8-d0beb879d3a4", "indicator--7a8cc469-e2f7-4bd1-9473-4c791dade268", "indicator--7f9c561a-0201-43e4-a48b-25675b8b7785", "indicator--18734d83-1b3d-40fc-bf02-2cdc1a22fdfe", "indicator--b4ff3284-15b4-4063-a4ce-11ee415daa9a", "indicator--182adb5c-16a7-4400-a2dc-938790d0b3c9", "indicator--715f4481-ee87-42a9-a294-786c2fc3bc49", "indicator--52300e2e-7c33-44fd-93cf-4d1bc43784ba", "indicator--f971f1cc-f0ff-4f34-8e58-ad84a9f0008b", "indicator--4e7ca672-af40-4a38-bf4e-b5b798bcaa7c", "indicator--d33eccce-3363-45a8-9269-861f2811e3ba", "indicator--8480a9e9-380d-4445-870c-11e1c8201d59", "indicator--4f72404a-73ac-44ac-8d00-00633b0c1b0a", "indicator--8080c101-8e1c-48e4-a044-06ec39f16471", "indicator--d35932d6-bba9-4aad-a456-99d2500599a2", "indicator--70049da8-2978-4df1-8477-686566bcab69", "indicator--98423db1-e3af-4f76-9f5d-42e15e126603", "indicator--e9be2ad5-5632-4e51-9c69-c8229639385f", "indicator--0a3e47e0-10da-4558-92dc-936368d1e207", "indicator--6d289044-0ea0-4968-bca6-75abb38f8535", "indicator--360941b8-16e1-49b8-95b5-e118bb230a7e", "indicator--b6fa7e85-410f-45c0-abf4-a8d302879d02", "indicator--36a049ce-b9cc-4c56-aaf6-3504eab09471", "indicator--bd672ed1-b46a-48fe-8be2-53c060ef419a", "indicator--1b17e1ba-9ce4-45f0-99e3-837db0c03ce0", "indicator--3d06313f-ed80-49f0-be7a-7a8c45c7f93b", "indicator--dec09c35-0db2-4c58-be3a-4f234daa9afc", "indicator--50be9aeb-62d6-4732-a2e1-23ba38a35f17", "indicator--48105590-1aeb-45d1-a6b1-e0e96fcb8693", "indicator--3c0cd308-185c-46bf-801b-aeb8f5bb873b", "indicator--6fbbeda4-9df4-4fd1-a4c0-c89ab3d531d7", "indicator--2f92f99c-a430-4a3e-b52c-64d476d295d0", "indicator--8b04afdc-037d-4848-8dc5-8cce74a55982", "indicator--ba71d5fd-be9f-4191-b940-577cc4014756", "indicator--5376d7cb-3836-4e85-8579-841f05c0f1b8", "indicator--a7103eb8-2630-466c-a52a-ad163e521add", "indicator--fd1a7972-8b61-4d46-a94f-65283b3961ae", "indicator--843aa39d-7cc1-4051-9382-60d4e471b53a", "indicator--8f013994-0db9-45c2-8618-1d49c89c503b", "indicator--48aa2bcf-3c67-47b0-b85c-260ea4044227", "indicator--4793290e-c602-4cb4-b325-16d092a2a4b3", "indicator--4591ee39-ad87-4b5a-a9a5-09758980e59a", "indicator--4df19fd4-3e7f-447b-ab6a-a80a3e4ab6ed", "indicator--2722bfc3-a486-40c4-bad0-9527d1231a4b", "indicator--2d9e2771-594d-416b-b0a0-d932c1889b9e", "indicator--fe365f88-b29f-44f4-a765-5d92a113179e", "indicator--50592b15-9051-43a3-9ea9-c76838a998fc", "indicator--7d301554-6595-4807-861a-d0fffa3f30ec", "indicator--bfdcb366-e065-4a2e-80b8-1c01c55c4bc6", "indicator--3000568e-9627-40a1-aed8-a1bce2ec3161", "indicator--55669ba7-687f-425b-9583-04a70233fb11", "indicator--d771318a-53f0-453c-a3fb-0e3134cca107", "indicator--b1a30718-4e72-4760-9cfe-35786aec9225", "indicator--72b063a3-9383-4176-850c-d2bb8cea2c40", "indicator--d0e05161-1b78-4fba-861e-14ff571a331f", "indicator--8c2d4347-f580-4715-9815-727fc19827d9", "indicator--1b1e7ca1-f5ea-4fee-8e83-1dface061070", "indicator--a8af9554-a7c7-46b2-a5b1-1aa0f2c659ad", "indicator--66e84d7d-e379-405e-b521-e8123612e072", "indicator--46c12bc8-8dcd-493d-8949-e12485f65cc3", "indicator--b847c1ab-70a3-4c73-b2b0-203756870c00", "indicator--a85948b0-b537-4d30-afd9-e88e97c31789", "indicator--0196b43f-7888-46d7-998b-acbfef5127c7", "indicator--a2b49df9-8623-42a5-bcf6-d46f0dbcea67", "indicator--a91fd852-e9cd-49d6-a16d-3f63f3779eff", "indicator--99e02859-9a46-4e6b-a768-e0165f286a7b", "indicator--feb0f785-fd26-46ff-8975-8b11ddc1b2bf", "indicator--79732be6-cb57-44ab-83d3-ff4a5c405dde", "indicator--e6d476b9-fbca-44ea-bae9-0c752393dc89", "indicator--b530f169-9f3e-4b56-a8ed-89816f602cf8", "indicator--2ed50f41-f027-44b7-859d-3678ebf22ed0", "indicator--6e891c96-a19f-4806-a6b2-8fbb3278ac87", "indicator--b6ca6940-76b8-4046-a057-94a1f44b9f14", "indicator--b2054a3a-a99b-488b-8301-42a98cf86abc", "indicator--6f94fbbe-7045-4a78-9eab-8447b4877417", "indicator--85b440fe-cca4-45b1-9d33-ff514fa3f4d3", "indicator--7fbc019f-2121-4667-8a21-41b684484f4d", "indicator--55b77d1a-8d49-415a-a63f-a83e9e5bc5d1", "indicator--02a844b6-83a2-4c68-8159-80558564b925", "indicator--5f4361b5-421c-40e1-b3d5-4fe4c721a969", "indicator--0808bfbc-85df-46d9-bf29-314a91834923", "indicator--07c88d30-49a4-4fd5-bfd1-6e1698f906b3", "indicator--79f70ec5-eed2-4cff-8feb-4afa7eebd058", "indicator--e6faa8c3-56ca-40ca-b398-202f273288bf", "indicator--2806fedb-fe13-4d7e-9561-0f5236be55bb", "indicator--b4cba2c6-723e-4674-a916-be73ed1223e6", "indicator--8a85e844-905b-4eaf-ad7f-59fdd3089bc1", "indicator--4497b9f4-c6fe-46d4-8678-e9b38909cabf", "indicator--eb8da488-7756-442c-a018-272d48a3acac", "indicator--3d12625a-8dec-40d3-ba61-5d4b2b6c8b01", "indicator--f1cb5897-edf8-446f-8e3a-473dbf0d3c7e", "indicator--29d99978-6643-4128-b7c9-fbb9f8f92355", "indicator--fc10764b-6ab2-4450-94c5-96b14f059bc0", "indicator--69a76b8d-1ca8-4090-9cc4-806a00583b67", "indicator--e0268c9a-7eb3-438a-a880-91e60ed81711", "indicator--8b3ea981-2b33-48ed-81af-f9d512894530", "indicator--6bd0606e-3960-4681-b5af-390c9fbccdf3", "indicator--9e700060-b323-407a-a2e1-4c5431a5a611", "indicator--e4c11f54-015a-4816-8ef8-cffae4df3a3e", "indicator--16450857-e6a1-4306-ad8f-d639f80ad1ef", "indicator--c525c80a-bccc-4938-a6c3-a28023e1215c", "indicator--42ffc1f4-bcbd-4d8b-a706-2ab58a4246c4", "indicator--90b9ed19-36a2-44aa-9e77-4b303d64ed4b", "indicator--db5d02f4-6fd7-4c7d-b9df-3d9aec390d4f", "indicator--c21953a3-1dd5-447c-8251-df6548d8dbff", "indicator--15a92c4b-c821-4e69-8a50-98ef50e9222d", "indicator--f80b26ca-4214-4e01-b089-351a544aa3d0", "indicator--141a6f03-e093-4851-87f0-4bb0fb249544", "indicator--d9327544-5042-4168-9dca-a9696bb2c01b", "indicator--71dfb1a1-5ec6-4206-9281-56893a82a500", "indicator--b532fbed-0c0d-4f50-a942-0bee5e428f9d", "indicator--04a67d72-eaf6-48aa-a280-42168e9639cb", "indicator--29847651-e314-470a-85b0-b16315d64ea0", "indicator--a5b676ca-64ae-4afa-9d2a-2794425a707f", "indicator--0277b0cb-fd58-4250-9681-5d2f4d017516", "indicator--26e8a806-df60-4e42-aff7-9a75aaf317f8", "indicator--f525c52b-580a-4051-aa69-ccdcd7497161", "indicator--34dd64a5-367a-436a-a9f2-e56067278df6", "indicator--786c9ede-bea4-4139-bcac-5b0f0f317335", "indicator--ff5963ca-6201-4988-8053-a886de36daf9", "indicator--9f8384f5-29ec-4210-b664-90902ca7c8df", "indicator--3e1b310f-20c5-4de5-8329-d3090a757fc0", "indicator--4d278540-8c9f-4bfa-a099-425cba2735fd", "indicator--1e7b5072-0e4a-4a21-86d4-db5736871608", "indicator--6366b9a7-e05b-4743-966b-e82808a9a69f", "indicator--18f733e2-0d0c-42f8-87c4-49b706deb00e", "indicator--07fb3b7b-d71a-4f7f-be48-b1ce0c6c8e89", "indicator--d951174d-628e-4384-8984-3a10ecf0ba2a", "indicator--e14d8eed-2da2-4f09-b45c-985905a81cbf", "indicator--b8076876-60bc-4973-b550-ec5242c15e20", "indicator--58f17dcc-a39b-416d-bc60-f236b4ee2363", "indicator--d6e5fb08-0d7f-44e6-a77e-73dc7ed948ee", "indicator--e9328e9d-8c49-497e-9617-179bf3a4970d", "indicator--eca96943-2198-4563-a001-2b2b5b32b0b6", "indicator--b97268bd-1ecc-4fd9-8af6-23a38b29d868", "indicator--00753116-5c5e-4876-ba7b-9efd74b8e7d6", "indicator--940cb0c3-d790-4e2a-a8f7-ad5178d9f314", "indicator--5486d10e-368c-42db-8ee4-9370995d18a8", "indicator--089b38c7-f6cb-464b-ba1a-9fe02f213ac0", "indicator--fb3a4c9a-ed5e-4e9b-8816-07e2650bf7ae", "indicator--5c291612-28bf-4776-a789-9f972d6f6048", "indicator--aae89629-51d2-47b2-b239-d2803739b7da", "indicator--c234e55d-7105-4a73-8990-937d099caa68", "indicator--7a635b7d-5c58-4485-88b1-dbc77007c7b7", "indicator--7fccd5ec-d9e2-4101-8c8c-c3dbf06ee5e8", "indicator--bc8b4ac3-ae19-45fd-ab1d-00c52acf5665", "indicator--8559b6fc-6dd4-4fed-9300-49cac2cccbd4", "indicator--2f6b99a6-c635-4025-bbbe-80bdb256bc0f", "indicator--bde9bc4e-4103-4c2e-a52c-80744c4e08aa", "indicator--66c7476b-fab2-4863-b7aa-d3ca6e0b872e", "indicator--0ebbbf9d-e183-4a52-8ba8-53cb90443c4a", "indicator--00feff6e-98bd-4c97-aed0-59cf09178b74", "indicator--8d48809e-f24f-4762-81a9-2facb372d3e6", "indicator--ed83a5bc-d8a8-4306-9912-fd6abdf575b8", "indicator--3497f1f5-5ab7-4684-a8a4-ec2b4bbf2a1a", "indicator--9185e2ad-2869-4a4f-b0f7-94c8747e015e", "indicator--e974e732-863f-4b74-a735-d9185a88b49d", "indicator--41845760-0659-49f4-a549-83ec02e829dd", "indicator--1e8325a0-e88e-4a56-9cd9-f858bb470759", "indicator--90b7549f-d05a-4b6e-b048-5ac45a9830fc", "indicator--042038ca-83ac-432e-83b8-ae49bdf3d21e", "indicator--ad400e5b-b785-430f-9e5f-accbd6c008d7", "indicator--61a8d52e-1902-4265-b4d5-3bf1b1ecf6cc", "indicator--835ebd94-c357-4345-9611-dc3d98fe3c7b", "indicator--c7812b66-0366-4fa9-bbf0-95ed6fabbb74", "indicator--9c0c366f-c86a-451e-a0b7-7e0aad4d8352", "indicator--526d8e1d-8e4b-4e9c-b6be-524517b5f69c", "indicator--42e86323-1833-4c8e-aa96-ac42ff926b23", "indicator--27cbfa26-f07b-4dc1-857d-568c33e39462", "indicator--41c4bef1-a88a-4588-a461-d3c90820e300", "indicator--880a48cb-f9d4-4cab-8071-e0ea48b194dd", "indicator--6c2de0db-4e69-4452-9422-1aeea4936062", "indicator--d49405c8-af77-40c1-9ecc-533fd30dfe4a", "indicator--a29492f9-2425-4447-b925-93440d14a04b", "indicator--291174bb-94a3-4dbd-8f70-75cd11977e93", "indicator--b736aaed-c7e3-458b-9d3c-109cafa4a038", "indicator--50d8a6cf-ca00-4994-a438-610675d9cdf5", "indicator--0e6b5101-0936-4bab-b862-3c67d5856420", "indicator--943d43a8-1b29-40a0-93be-67770e509987", "indicator--9d8ab77e-cb8d-4e3c-9e8d-fa829b632759", "indicator--b0722196-3a2b-4b71-bb02-8c2426fe24f9", "indicator--ce735205-41d6-431c-8b1c-6daf941dbe0e", "indicator--b7ca07ec-9cb7-4e62-ada1-688cd8b9e6ab", "indicator--0c3f6cad-3d2d-479f-ae19-9a82b56c227f", "indicator--bc71ed5f-30ff-4e3a-83b6-4f6e69006a02", "indicator--03f757a3-6723-4110-aa4e-987a774e53ce", "indicator--20be507c-607b-4a20-aacb-bdd6f7573d44", "indicator--1aacee27-6f48-4f8e-9e2e-0b291f7c4ad5", "indicator--f6555bcb-8fbe-404c-8439-5299b5c843e4", "indicator--0da6fbda-408c-4801-900a-5c87a98980d6", "indicator--f697037c-3c09-4fa8-8862-71060fecb8da", "indicator--7beca5eb-8cc7-4a49-8ff3-3e88faac7469", "indicator--ba30635f-10f4-4efe-9192-12ff80904c22", "indicator--cb8820bc-51e3-47c2-8385-b5217be9077d", "indicator--2d69159a-5cd1-4e0e-a26b-d177d76dc6b4", "indicator--d8de6fab-e24b-4b67-8e0b-2e067923cc82", "indicator--e76325ab-d3d4-457d-aa63-28f56215a6f3", "indicator--5e1a465a-b3bd-4a82-ad56-0791fda7d656", "indicator--3b8b61a7-b2db-4e14-b9da-07fcde1d0b00", "indicator--5814ab1f-5295-41c0-b483-31ce42610ec3", "indicator--08e256a1-0f56-4fda-973f-071d6be8156b", "indicator--dc8c3e9f-045e-4413-b5b3-79f0fa63dea5", "indicator--622b4666-82d2-45ef-9bf8-074146377bf5", "indicator--ac20f3f0-ba1d-4bc1-986c-939ce20f81db", "indicator--e738fc5a-7d14-4b14-a57f-21da35cca1bd", "indicator--13226fdd-875d-4adc-8fc7-b828988fd073", "indicator--1b0106b8-8998-4fa3-a485-3ed6f3637c89", "indicator--81c53f78-b91e-4ec1-a6d9-d46b21e5a303", "indicator--58b6f098-e587-470f-9c3d-dbc77c59c131", "indicator--eebb2e0b-4c26-42dd-987e-9d8424f32c54", "indicator--7391835e-5762-40c7-a550-a588d1b462f1", "indicator--f72ec3dd-63d6-4569-b607-8f96f16e4ada", "indicator--ee975809-796f-4b88-9a80-dc144817f366", "indicator--c53f191a-db70-4462-982a-903e92941b9b", "indicator--b375b1af-ddb9-4bf4-9bdf-24dbaf3453a9", "indicator--e17533d5-e9be-455a-b7dc-c5e00fac28c6", "indicator--bd72986e-0f16-4d4a-93da-57bd2115c0ea", "indicator--929cc420-6631-47e5-ad33-fa0486e8ed15", "indicator--9f119c77-ccd0-42c5-8d5b-e638baa93c88", "indicator--46e42a2a-024b-4493-bf6d-a49cb5f37150", "indicator--ee5e7c0a-1ee3-4c31-a1c1-2474b4eb195a", "indicator--6b2b0ff0-d194-4fb0-a1f5-019eefb6b695", "indicator--3400134e-7af6-403b-bb46-03353f0a454b", "indicator--922c99c7-41c5-482c-8edc-fa005a1c192f", "indicator--658d1444-76f5-41b3-9e59-b141fd2256dc", "indicator--16f94b49-ea46-4dcc-afd2-542ea467f004", "indicator--d52003d4-38d8-4398-a402-ee05f370ac74", "indicator--c9135f51-8520-4174-9e7c-b911fc275672", "indicator--8e3cf8ce-88e3-4bb6-99d8-8e8020a97e5f", "indicator--d3fc8030-a1cb-4c1c-9a94-382ab15f17d7", "indicator--c052c105-974e-4199-84d8-3b2a20db8937", "indicator--a81f9075-2151-4db3-a5be-99560dfad29d", "indicator--d22a7e69-327a-47c5-9237-4fd40eb005de", "indicator--0085ee85-3d8a-49e9-9629-55d92b65ed08", "indicator--09980b2d-1d16-47a6-890a-be6e809ab33a", "indicator--8661a83c-d28a-4b96-a758-935f20df44a3", "indicator--0b0e7cb3-debb-4333-81b2-abb41faf6d23", "indicator--ad0fa633-2057-455c-ba4f-c52f3b07fb1e", "indicator--623792b6-11fe-4506-9f0b-d57bb75f6bca", "indicator--f5c792ec-a9dd-4177-a24a-21cc97df7f52", "indicator--e4383dc0-af99-4029-a0fa-4aedba48206c", "indicator--90a626d1-795f-4b20-aac7-476a151041a8", "indicator--10637eca-aa39-4e7c-86d0-2bb1492d7b2a", "indicator--06f3a700-b5d2-4e9e-8db9-aa0ab6076e54", "indicator--e90482d8-089d-47f6-8f09-b4a2fd5dcf3d", "indicator--24fdcf25-7336-4b34-a0f7-25e9f63cc0a4", "indicator--fc6f7950-b585-49fa-889f-2a8a03505c0b", "indicator--8ef9d744-3c56-4ebc-9b07-fcebe9811aef", "indicator--7371ba43-e577-4f8d-b031-f0a7b5e36062", "indicator--7e7969dd-ee8e-46f4-adbe-44aab24d283c", "indicator--1f06a10f-5090-4421-97a9-d3ce5b3bb7af", "indicator--fe5bfc96-8d9b-4aef-98b6-590cf35c45c1", "indicator--7befbe58-e6a7-46bf-b234-bd2d0962312c", "indicator--d43b616e-2d77-4df9-92c5-fe7e7154d441", "indicator--dfdde40e-60da-4130-bdd4-83459e1e8bdb", "indicator--9fbecc30-6c29-4fd5-807f-e1e8d90d1315", "indicator--ac4c476e-7fc7-4284-9da2-065fda33919d", "indicator--c868bc6b-9601-41f6-966c-cfd62180872a", "indicator--94bf24e2-4287-434c-a96d-0fc2d6b07e57", "indicator--f68e17d3-452b-4c9c-a1f4-b5d396552c67", "indicator--9441175e-8f40-4c7f-940a-4f13e7c9919b", "indicator--ce9379bf-44dc-4956-a1fa-ec9282b13ffd", "indicator--83f8df3f-6ac6-4c50-9ce6-cb08846df1c6", "indicator--49af647a-a3a1-4dd9-bbd1-91071c90a855", "indicator--858b56b2-af09-47a5-8371-b9f369fd7449", "indicator--4f61dd09-796a-4957-93f1-6933adfb93e7", "indicator--4fb229e8-a007-423f-bc95-9a54431f266a", "indicator--f8136468-d8fc-4f84-9030-14c1b6153c09", "indicator--4413d972-440e-4cf7-b60f-9edc3c986506", "indicator--96b47de7-0a02-4ce0-87dc-59bcb906b7d3", "indicator--57c24c8a-2557-41a7-a6e5-7d47a3a9c454", "indicator--58840e58-288b-4a41-80c8-c31e8fc519fe", "indicator--d1557c2a-011f-4c65-b997-ec1520cb5784", "indicator--ac01dc4b-6185-40d9-bfe1-e24ebb1bdddc", "indicator--accf8937-b24c-4794-8498-fdff1b003439", "indicator--9d5c3c4e-6b96-44dd-892d-0daf7d5874df", "indicator--2ac95d01-99b6-46fa-bf65-e2746868aefb", "indicator--14f1765d-5a84-4a15-948a-fd195115c6b7", "indicator--b5c5989e-69c7-45e2-85a4-569b2dbdf8cb", "indicator--cd302bd4-6d3b-4f40-9894-ef1c3bcef7fe", "indicator--1f54a45a-a6d5-41f8-954f-84faf4a2414b", "indicator--f34e10a5-7969-4af2-99f2-a44016c9a81c", "indicator--c71ce4c9-d81a-498a-a73c-25dded0abf28", "indicator--55d3e911-bda6-4d6f-80cb-8aa0ba5d2a10", "indicator--8db1ff82-361c-46ca-ab61-1962d0a4d0c2", "indicator--df460369-2618-4216-8093-2e6d2f457023", "indicator--c67abdf9-0710-4134-ae8b-c20126657a36", "indicator--9bb8448f-4d24-423f-b965-77ac0ac5ebd0", "indicator--940824b3-7ced-4651-95a1-4af3bf7900ae", "indicator--32c34556-8492-4dd6-b194-30fbad69fcb8", "indicator--3d1f5fc6-fc79-4cf5-b5b1-f9875b56fd86", "indicator--c66eee20-a440-46e9-90f1-e839387e80e4", "indicator--9118ee76-731b-4810-923c-98f0a2316dce", "indicator--cde5d83d-80bf-4281-a374-129c9887b5f5", "indicator--2ef62ea1-6103-4b08-a28b-b80986276e72", "indicator--6b698306-84db-474f-8bb4-806d0f6f8742", "indicator--51d24366-e597-445e-95c4-27e7f9b99014", "indicator--12eaf865-20bc-45a5-8fb4-ae538854460b", "indicator--9ab49ad9-792c-41a2-82a2-b91b28bc83fc", "indicator--564982e2-48ff-4d2a-9217-777e6097d63e", "indicator--5b670012-2ccf-4ad9-8cf5-99d9e79490b0", "indicator--4de05983-728c-4af0-9c31-dbda6ef4ea43", "indicator--7dede9cd-d86a-4569-8c14-4c4309988f55", "indicator--c0c244c3-31c5-44da-8639-11bd64a86816", "indicator--2adda27a-c6bb-41d7-b0e1-73758ad17dd1", "indicator--a0b1dd45-e773-466e-ae54-05e172290bcb", "indicator--f9f97b11-7f0a-4063-864e-9fb62a4e9489", "indicator--66e2f218-bc72-48e4-a151-758dd6cde1eb", "indicator--a7ccad82-aba8-4f58-b8a3-7daf487321fd", "indicator--1eaf19b3-c13c-4eef-95e6-e75aa56082c8", "indicator--2ab4332e-92e6-48fd-98c3-b195737444bc", "indicator--cfed695c-db62-494f-9a50-073332a08ec7", "indicator--496b7497-3616-48cf-8668-e2ee6282134e", "indicator--98804acf-9747-450a-9ba1-7e860b9f1cb2", "indicator--b6a4124d-5ac4-4e17-b00e-be1069e43d1d", "indicator--f1abaaa3-3d54-4a0f-a82b-ea7efddcd37b", "indicator--735ddf4c-9ea3-4852-bb1b-e90bd17927c7", "indicator--90c603ac-3522-4cbf-87bb-b1b3f7ea7eaa", "indicator--13a2890f-8f94-4c34-9bd0-8771712e29c9", "indicator--8b06a612-768c-4a2e-8ed3-e3ac655a7f90", "indicator--78a51092-4ea3-41c6-9172-b5074796c387", "indicator--f1e36bb6-d86a-4702-8af7-7906c33a4d0e", "indicator--bad5a26e-dd22-4c45-b6c0-91e4c51d9a52", "indicator--f53d3058-9b20-471c-b345-1cf02745847a", "indicator--4596f407-e4e7-4695-8bbc-bac7869a2186", "indicator--7cdf5bce-5807-4fc2-9db1-07ba7fbd2790", "indicator--c0507169-4aff-44c3-889f-a7400bc3df86", "indicator--4ce8351f-c090-4503-ac16-b1a37b07cb9d", "indicator--b5c4a5e0-e2c3-43d5-9fa2-84e93c55241c", "indicator--81da4513-77d1-45d2-91f0-7576a8218d51", "indicator--49dff1fa-14c6-4163-80fb-7185ba3d1e5d", "indicator--252b4140-4ee6-496c-898e-3e5712cbad2f", "indicator--e2986c3e-36ff-4796-a1b3-05590d3a5e63", "indicator--a20fe9d6-695b-4859-9c48-f3c475bcf840", "indicator--65d69c05-9464-4bbe-86d9-599515dcb6e3", "indicator--8fa41884-3f8d-4eee-946c-086ce7972aa5", "indicator--76e7d9f0-bc77-4cae-96b2-18cc23349f13", "indicator--cf8f8ec1-6dce-448c-a29f-fd0d1338c430", "indicator--27632bed-ceaf-4c29-9845-c0ab1e14c03e", "indicator--d7cc1c28-f923-4b09-8500-77c3521b4bdd", "indicator--4c98cd12-51e5-41a2-ae6e-f828863cb88d", "indicator--f0c2db2c-b55f-47b6-9a25-e6537b58cc9c", "indicator--fd4a7389-b7e4-49cf-ab6d-befc00cd4813", "indicator--b61211c5-86c3-44e4-94c8-8bf63fccfebd", "indicator--5e6a6e77-66e1-4c0d-9633-004511fd9a32", "indicator--94d852c6-b820-4b9c-97f7-912ce4fda0da", "indicator--a23c5c51-9a4f-4787-b606-d50076cc93b8", "indicator--08ce5785-42c7-4813-af41-1cca832dd316", "indicator--084b831d-a00d-4154-9bc5-65a126ab4f0f", "indicator--84638e97-7d14-4b5c-91e1-8e6fca083aa9", "indicator--b9c60a38-dbcd-4f51-b67a-9b9bcb896562", "indicator--c50a063c-68f0-414a-be01-5010d30674ba", "indicator--e23e9e7c-fcc0-4e3e-b2c2-58c68daa184c", "indicator--6596a2b2-5b80-466a-bf95-878671eee4db", "indicator--5e7ec206-8fff-4db7-bc6d-4a08c153865f", "indicator--db4a3686-bad0-4c01-b780-d29ca2ecf2a1", "indicator--69be4426-8a2f-4fbc-a662-7f161f243271", "indicator--2249ab22-c68b-4a80-8a95-6786788b2abe", "indicator--cf4f61c6-9944-445e-8cb6-36566e6b64e2", "indicator--09a76511-51f9-4ffd-a833-72e5386786c6", "indicator--e1c5293a-8ecf-4177-aa47-25f308bdbbe7", "indicator--fe70f2f2-b7d7-40b3-bc69-f986913c549f", "indicator--d5b6347e-0be7-432d-9658-e521a8c9c8e8", "indicator--2b6c3049-77d6-4adc-ac1c-5f4b4eeee72d", "indicator--fb82cf2a-220a-4894-b616-4473895d9b60", "indicator--a78d310f-68dc-41aa-9269-ea5a15b7e532", "indicator--42bbe532-8cf5-4189-b220-ec8895d625af", "indicator--54921fbb-133f-44bd-ade5-2ab7b73b9107", "indicator--b1be2086-aa9b-4264-8d33-57702a9ddba1", "indicator--065c580e-ada7-442d-bdb7-75b7caa7258d", "indicator--e819baf9-6a11-4673-9472-637750ff5d52", "indicator--2a9af692-b857-4c1e-9c2d-8c02bca543f8", "indicator--b7def460-fdd7-4b00-9069-469445d55367", "indicator--f62f3df9-e573-44b3-a2b9-0477da7b09c9", "indicator--5edfd64d-e1dc-40be-be10-440a8dbcfe55", "indicator--7f8160b7-f71f-4292-a0cd-23043efed9ba", "indicator--93c33968-f424-479b-9589-da7da190aada", "indicator--73f5dfee-95da-49c5-ac63-e6be0975b26e", "indicator--f383271f-05ac-49fb-8af5-3a0edc0d2deb", "indicator--3b2ce7d6-9293-40a1-ba69-2e80f4df73d0", "indicator--61604cf6-e337-4c0b-bf12-5b5a3301af52", "indicator--ef5ad1aa-f617-47e0-9e52-6d604a82fd13", "indicator--a61230bf-0e5b-4746-80a1-5a383d1a71cd", "indicator--cf1040a9-3415-44ab-ab9f-f2352ca208c9", "indicator--e9fcd2e4-85ea-4786-9d7a-bfea406a2e84", "indicator--e1072c0e-6158-4fea-94bf-79afb293a76e", "indicator--64eac41a-2027-4753-a2ca-27786faa24e1", "indicator--1e0f1e74-d804-458e-bbba-159e0da20c84", "indicator--4fb9f5f6-8fc5-408b-8c91-145b3e0eef90", "indicator--2c9d37d9-c75f-4f40-8d7d-fd0961c84ec2", "indicator--a8302ae5-b27e-49aa-bc8a-38438c79cb39", "indicator--fb557b44-f514-4c79-8ae2-3564678ef8dc", "indicator--f6d935a2-122d-4094-86d1-b64b7ba25953", "indicator--3154882d-365c-456a-a231-43388234f2c5", "indicator--4d3de5ec-74b9-4ad0-9d29-d38a326d56e4", "indicator--28f8380e-5500-4c0e-898a-a1244dabd726", "indicator--7c29fc8b-3584-4dcb-9453-aa78d2d38776", "indicator--dd6a0258-e125-4e9f-a969-55d6418d256f", "indicator--ca2ab3da-494b-4ce2-b456-5d41ff54abb3", "indicator--5da482f5-af05-46f3-b8d4-cc36d45855f1", "indicator--9128965b-1a26-47c2-905f-1fccea9de0ac", "indicator--41d7a242-8772-471a-b08f-d11767b12d10", "indicator--75552fb8-8dd6-4fa9-bbf7-86f1f2697756", "indicator--d279c513-be5c-4d44-84ba-94f85c890c89", "indicator--08343898-cfb1-4e85-967c-d87dcfc832a4", "indicator--d388a09d-1ac6-40c4-98e1-1a52927226b1", "indicator--c2446a11-3fdf-48a5-86e5-62b5f16ebb47", "indicator--310fa16a-56d0-4418-9518-12de3c01e344", "indicator--42d5e8e4-5544-4016-81f1-c83a5bde1c0b", "indicator--aca62943-0660-4741-91b9-283eb855021e", "indicator--1d0cd22f-ee0b-44e6-a1d5-85f4b87aaed1", "indicator--3582911a-98ff-4478-a2f0-c4c574c9999a", "indicator--e7635648-e7ee-479c-a21c-7d8192f478ed", "indicator--f6ec3e4a-49b2-4aa0-9919-8cff6b76b4b1", "indicator--482bd9e3-aad1-4771-a1a0-0b3ac305b840", "indicator--4e0499ec-788f-4490-a3c8-f1a4ba641100", "indicator--80e0cad0-80c8-4ee7-9e29-31a51fb17448", "indicator--4a1dd940-51cd-4828-bf12-d9bf5e83376b", "indicator--bb3c818f-36c2-4533-b576-d52abe778838", "indicator--0e7ad91d-b881-4538-81c6-c5bc6b32fb62", "indicator--b678d659-844c-402c-b6d7-7ad92aa31102", "indicator--495c70f1-b70a-4398-8038-16dce7533ebd", "indicator--2d1cb5e4-d48a-451b-8910-9b4a2fda3d37", "indicator--a3df74a5-5b46-4818-83f7-c415ac2ce718", "indicator--5bf7898f-84da-43d2-b2b0-17ae461c3f83", "indicator--c4b9b5ab-df0c-4183-ad42-c8dc36cfaec6", "indicator--e3a19fa4-18b5-4a42-b29c-cc58f8ecd824", "indicator--549c8e14-5b35-442e-8c6d-6fd21222e860", "indicator--571abb1a-5cce-4c24-afb0-ebe192ee18cc", "indicator--95bf5720-207b-41c6-a670-c840d4f3ce26", "indicator--8df30b8b-929b-485f-b10b-2eef49c40235", "indicator--241f0f56-03bf-4276-b32a-933dd67c528d", "indicator--6d15f1c0-5676-4545-8cd6-7f6ab857bc1b", "indicator--c38bffe4-2eca-4363-8f8c-9b77c5c9fe5e", "indicator--27b4441a-7468-4bf4-8075-19b6cfb7019b", "indicator--f0713907-9f05-452a-aa11-d8825a626be5", "indicator--bba42d3f-5e78-4d7f-9f37-ab6842f68a1c", "indicator--a03463ee-5e2e-4582-982a-6f4180dd9526", "indicator--63ed14a6-d1cf-4417-a950-564f4ca5ac4c", "indicator--fb1854c2-9f4c-4077-ac8f-fb619f42e317", "indicator--dec51f8c-c294-4ec3-ab84-6387cd91643f", "indicator--97c72ee7-8f05-432e-8513-4a4a4da24d54", "indicator--501232e0-f145-471d-998d-da2e8b948f8a", "indicator--682c932c-86f0-409d-9b6b-89c4dc8af0a6", "indicator--9b63e249-916d-4b57-9246-b0a2de84fa59", "indicator--1a7865c5-6033-49b7-8a28-d2a92bc63210", "indicator--f3ab0a09-3ebe-430d-9196-47bbc53d32fd", "indicator--12dd077f-6589-4bfb-b8bd-5406523aec2d", "indicator--e97e6df5-ba81-4e80-a05a-f570077cf7dd", "indicator--a054593c-c542-4cf2-80c9-67a195a37333", "indicator--99bbff55-abc6-4902-8100-4ca2fb237558", "indicator--653fd360-22d1-4d84-8720-837f7a1cec42", "indicator--f8390429-68f8-41df-850c-0088bd8e2bd6", "indicator--110c028c-e9ae-47cb-b036-d722cf4e1089", "indicator--d0ab99eb-3daf-4c53-b708-0651d3da0e78", "indicator--3589716c-de2a-4726-8321-89a85762cf82", "indicator--47aa550c-129e-4cb7-939e-a44e9fafad17", "indicator--7b9bc1b8-faf3-4c65-bc29-3a5d1e9795fe", "indicator--96df9199-6622-4854-acf1-266a51687c4c", "indicator--10ce45e0-9ec8-428e-a513-b309de5f5793", "indicator--36f8733a-af0c-4d1f-866a-fa914d3c9439", "indicator--acf20990-d4d7-41fe-a141-3b253f244823", "indicator--f007308a-8d22-4178-9065-7f4daed0c413", "indicator--a7239aa3-9ea8-4ecc-91d6-bb0376a3d2a5", "indicator--42a27211-265b-4198-a798-1a1f6be84861", "indicator--ec199feb-94b2-42a6-8db7-cb8c97c4d121", "indicator--2177a396-7e84-4dd6-9650-0624cc3a8665", "indicator--668e4205-c178-44ed-93c3-1041f981df97", "indicator--66b35a99-75ab-4108-94d5-98270e5e6f8a", "indicator--c9711814-80e3-4223-9250-27552660ef48", "indicator--d613a004-7672-4e83-8bd9-48861462c864", "indicator--c3cfb52e-5437-4b4c-bcae-ebd790f7ca5d", "indicator--7c0b740c-7eab-4a27-a08c-f1b25b3635f9", "indicator--6769639e-f78f-4437-9455-86dbc1682016", "indicator--d32c0462-b7d0-42ac-9508-9e2b6d017989", "indicator--a3b41fd3-abcf-4871-8e21-8d4b8906cf18", "indicator--9ed2353b-2827-4a85-aebc-f2b76da94ee4", "indicator--d4e5675e-5148-489a-9b62-165261ad7d68", "indicator--b6922b62-adba-40a3-9efa-76c2d645624f", "indicator--fcebd1dd-75c6-4158-8e52-1799f4a50411", "indicator--4b26c040-3121-4345-878a-74c5c2a406c3", "indicator--f06ad58b-af16-4671-bfa3-a923042ef38f", "indicator--8adac15c-2dd5-479f-95a2-bb34f4a9b89a", "indicator--96faea25-5bec-4e1c-a32e-9e1403362045", "indicator--dba0b888-9a89-4289-819f-65b7e0d1f548", "indicator--889640c5-d3e1-4976-a337-c52d0f86e954", "indicator--f57b5a6d-c4e1-4998-93e2-e01d729c3fe9", "indicator--cec2d335-6c14-4f43-bbf8-803894c64c37", "indicator--ddfbc417-8ece-4987-9109-9cefbb29ed98", "indicator--4704b454-44ce-4190-848b-c218ae42a917", "indicator--32e1b2af-bce2-410f-9c22-e9ccd5813c81", "indicator--1b36f84a-1bb5-4abe-8cbb-06e8f3204218", "indicator--50cef3a7-2d20-4cd8-9b46-d7e409435411", "indicator--39099929-1306-4c56-ab8d-59f7cef71f49", "indicator--6fb2d45c-4119-4862-a6d3-d61fbd25d0b5", "indicator--69176c28-aba0-4b69-9ef7-494129d6924d", "indicator--f24860d9-5ba5-4670-b757-3f6e75581cbf", "indicator--c014dd02-4cc6-44e1-ba1c-fe4a869d4109", "indicator--50874b60-1b51-4680-a83e-f2ce9ea53df5", "indicator--3e49e980-a58c-4f2e-a770-7a3331290669", "indicator--c1e9e4cc-b9be-4f64-8595-82baad9baa55", "indicator--d7694b28-3fe8-448a-876f-66969a523b49", "indicator--9785ddb6-5e41-4b9c-946b-42e049b68f58", "indicator--b99180f3-5cb6-45b0-b4db-f1a02e207c5e", "indicator--a3f9b53d-b501-48a7-a47a-73a6a138c903", "indicator--4e11de5b-d90f-4309-a821-7fb91e647723", "indicator--9379466e-44c0-42a1-b0b3-8aade8a7a132", "indicator--c68936a3-3d45-4425-809e-097e56299d51", "indicator--53afc75b-d3db-4fc9-9613-a85b9618180e", "indicator--e8b313eb-41ba-4a29-a001-fe2c6e32d41e", "indicator--629db91c-4cd6-4772-84f3-98880b2cbe41", "indicator--b02d46dd-b596-46a0-a5a8-5770c2ac896b", "indicator--4c436aeb-3305-455c-bae9-94985055d49d", "indicator--8c6012a4-255c-460e-aacf-26fa424f6f33", "indicator--098688d2-cfdb-4c53-855d-fee8a36598e9", "indicator--7d1b94a3-ae42-44c3-a871-52edb473bba2", "indicator--f0a053d2-d7a4-49ff-ba38-c750d5cffa9f", "indicator--be84a7b2-4bbd-4692-b5cd-b091b1cb25ce", "indicator--0f66bfc7-91a9-461d-868a-0677e4bd7af6", "indicator--aa58441f-971a-4dc9-82e7-deab2ed20821", "indicator--8ef0a49c-7680-493c-b91d-5c6545cc0510", "indicator--98a19d4b-6326-47cb-bcb4-6d3d47945ba9", "indicator--b58c6f8e-2f5f-4c1a-ab3f-5dcc9ecb784c", "indicator--2350799a-5bdc-4253-a927-cbc930622b7b", "indicator--265041c5-947a-4e46-ae62-085586f6b27b", "indicator--450111ef-e348-4326-92e5-619e05fcccc1", "indicator--85eb9489-d9c2-4522-8d8e-e80ab606d828", "indicator--3a081d59-6087-46a7-a696-a519ad235463", "indicator--64456c7c-9ef3-4eb4-a8ab-fb74e0e69233", "indicator--eb5f52ef-d286-4785-9ec5-ac3f8386165e", "indicator--9e547b16-821b-4413-b7ea-0851162fb6e2", "indicator--a69448cb-c36a-4a34-ba16-0975b5adc17f", "indicator--b0ba6458-48d6-49fe-babd-36d280715026", "indicator--99d78ebf-b296-4a0f-b094-1a021ff45af3", "indicator--22a35da5-ffb5-4c90-b0e6-779b9ff50bd4", "indicator--910d20c0-5879-46cf-a3ca-2646220ac1a1", "indicator--25095ae2-be99-4d06-b6d4-6e015c4c9ca3", "indicator--ed91c75f-a03c-4b82-9f0e-c495c59807f4", "indicator--996fceef-5794-455a-a165-b27bbd346db6", "indicator--4c10a7bb-5dc4-40bf-9fe1-98d7b635980c", "indicator--d68868f6-7906-4460-ac08-dbfe10ffde97", "indicator--cac8cec9-9545-4376-aa2f-eda419d6bb16", "indicator--68f4b808-137c-414b-9c43-65853e45c45b", "indicator--670deed4-d65c-4c52-98f5-9dcc31a81925", "indicator--198d5ada-2600-4a1a-bd20-b9f3ba0f447e", "indicator--d0b05fff-b1f7-4360-901c-840e7eed3be0", "indicator--e1d875c6-b1ed-4f3d-81ed-1f49bbda46df", "indicator--01388f0b-59b0-4faf-9351-7af3eafe6cdd", "indicator--f410dc62-4477-4fe5-95db-996314cbfb60", "indicator--e6e9377a-17b1-487c-bbde-4cd55f7f6f74", "indicator--c3105f5b-0756-42ee-90d5-81b045a832cd", "indicator--2a03429d-4482-458a-819c-69fc342ec67a", "indicator--309ea30f-1c9f-4159-a447-eb4b595177b2", "indicator--13d8e192-5e14-4534-bf78-3fe1ee96f6d1", "indicator--28c5f107-16e2-4411-a2a6-766a04114e56", "indicator--bd95fd3a-bac8-4bc1-af5f-0520034333c7", "indicator--087d61e3-5ac5-47d4-88f6-d99915b7782f", "indicator--b4b3b16b-f3eb-4625-ac60-bfe787675183", "indicator--2be43b15-5804-4f3e-bae7-c302a35bc067", "indicator--4641b3ef-08fa-4d77-9cad-c947ae49e034", "indicator--4a6bdee0-d899-4fbd-aaf3-d7a64350c0ef", "indicator--422091e9-3d76-40de-b08a-dadabd892fd2", "indicator--76299562-f5c1-40ae-bf91-971ef6c61d2b", "indicator--b7124e86-f94f-4117-88c3-e6701635f8a2", "indicator--d4f58265-c939-4d4a-94cd-fa959545988a", "indicator--06d139ad-fbb4-4e7e-915f-15be42379f49", "indicator--06ddbd27-1995-4559-abbe-335158258a17", "indicator--9974c39a-b0ea-457f-8b74-daa6a71119ad", "indicator--21e32042-ae61-4788-8116-5ccfd424af62", "indicator--9b563fc3-c1c0-45f6-ade7-5906b38f3821", "indicator--7451b2f7-d4ae-4cd9-bbca-08327a73f41a", "indicator--e7d9a5e1-af58-4e54-b6cd-6be64c2e7cb0", "indicator--898f6715-749e-4a26-87fd-4ca8db043856", "indicator--d94f7446-e06e-4a3a-87a3-2a3d5fd5c9c9", "indicator--4296443f-5af9-47b8-a9d0-6d66d07a8276", "indicator--4ef1e04a-17a9-476d-b269-59ba46d372d0", "indicator--e4d1f366-b79f-4334-8827-3531fc24ee95", "indicator--6b1499ee-6593-4c5d-b105-f7dfc66a0638", "indicator--5ecc64c3-0d9b-4d6d-8af9-37de4b3e409c", "indicator--1a389aba-f679-4c13-9ca3-12d9e44c8748", "indicator--9a21863a-abef-420b-a321-8032c0560282", "indicator--2822c015-18b2-40c6-b177-06bef3cb22c6", "indicator--e0fd854f-21b1-476d-b75f-555d36215703", "indicator--4fd84d40-97c2-45d5-ac6f-60e16d33b788", "indicator--fae7f43e-0993-40df-b88d-173d4235c14a", "indicator--90b9cad5-60d7-46d0-a279-d5745e5bdae5", "indicator--0ad199c4-0786-4a0d-9fc5-70d68b4393a0", "indicator--87236f81-04a4-4318-b0de-976788fae4db", "indicator--4d401dac-dad1-4b96-a58e-d77761615028", "indicator--016223b6-b4d1-46b8-b779-a1f8aa12f68a", "indicator--87d6139e-850d-46bb-9b0d-4f062a666cb0", "indicator--e6c76e63-7f87-418c-b58a-4b983607048e", "indicator--c2e6b84d-b13f-47a9-9cc9-491720257e27", "indicator--d617b95f-3d61-42e0-9230-8327e639f85f", "indicator--6d319b89-0ccc-4abd-a15e-595f47d00105", "indicator--70d29546-def8-499b-b154-07f254be6ed7", "indicator--6c1c5a97-cc42-4bb9-be71-f7674b4a320d", "indicator--c7749878-f727-425d-a4d7-385bea1624bf", "indicator--057d370b-cb85-4b8f-afe7-d6fbb9493367", "indicator--aeacf9f3-79ed-4d87-b3ba-7720cd4a4eb6", "indicator--3975acec-a0d5-4a31-ba99-293796c81bde", "indicator--7dcc5c61-84b7-440d-9333-c54f72dd4c5f", "indicator--2c64438a-a1af-445c-abbd-0b57de71ac09", "indicator--c91f75a9-b792-4ea3-a4b2-87332e8797be", "indicator--93e31963-824e-43ce-8625-5d592472dcf2", "indicator--a85aaedf-6a56-40b0-950d-c235c42f80d8", "indicator--1407459c-d34c-4be2-866c-3d71f6888323", "indicator--abd286c2-76da-48f8-b2fe-bc752e7b146d", "indicator--b9bf4f50-b3dd-460a-8830-926e7d4b50e5", "indicator--2c5c68eb-d526-4c4f-90e6-cc2e455600f8", "indicator--83355211-b798-4830-ad9a-ff40767efe1c", "indicator--4bf34b05-acec-4b5b-90cd-46542a7df290", "indicator--c6a97c48-e509-4c84-80cf-daa3c4e8c8f6", "indicator--7a6b9240-d0bc-4227-a92c-fdd99d241f2d", "indicator--d8dfe43e-1ae7-4dab-9ae1-534622ffb28f", "indicator--2c8ddefa-d277-4f49-9917-0cde376f2382", "indicator--713bf00e-fb2c-4142-b89c-f3106962dd5d", "indicator--aae97d30-c9f3-4536-8a09-55d80267633f", "indicator--2975475c-4a16-490a-911d-2bf883a84b01", "indicator--cdbe4f28-9a03-49ba-87e2-82c2b6b5f909", "indicator--f630999c-98c6-45a4-953f-042ed9a28696", "indicator--f6adcb3f-d419-4d53-adf3-14fae3cb40ee", "indicator--9b854273-055a-400d-a89e-34a99d67f005", "indicator--3bf92e7d-400f-430d-918b-ae90a5b94940", "indicator--aef25573-fbb0-4f6d-834d-37f53a7fd900", "indicator--8a4c3645-efba-457e-8044-b8f9580127e1", "indicator--45b36b42-114c-422a-82f2-09193ecc6850", "indicator--dc4a9320-671e-4ed7-bc44-d344b586748b", "indicator--2ebb3557-e442-45f5-9d68-aedcb8c955fe", "indicator--9bb48690-57ce-4144-b8ec-713a28b4bebb", "indicator--bee42a13-568e-4857-b9e4-518bef9e411e", "indicator--49f87287-f9ef-44fc-b63e-0317ab9fe67d", "indicator--fcf0e728-420f-4621-a34e-beda37227878", "indicator--d2887004-1a03-4802-98a9-ff657856525f", "indicator--a95183e5-24dd-4a1f-9211-dfc27c83af40", "indicator--142055bd-7383-44c9-a7b6-77145de57fbc", "indicator--c61c6a4c-8d54-4890-afbf-2529b083682b", "indicator--97e326b8-4808-484f-98b2-6f3e4f317e59", "indicator--5f741e3c-01b6-44e4-9f92-3c33167d2287", "indicator--cbd49454-bb88-4e9b-b74c-957d3c9c6abd", "indicator--0777afec-642e-4278-85ac-c4d32a5b5e1b", "indicator--0464c139-3266-4cee-b58a-cd0e802e6cab", "indicator--a36e5f4d-8551-4612-a806-f51539e1e629", "indicator--d55f817e-5429-451f-be7b-675189a5fb20", "indicator--42db6e53-9f5f-4b4d-8d4c-07015c6338ae", "indicator--cf9f026a-585e-4dc1-9dc6-7ba3df1f25ac", "indicator--0364f2f5-0ca8-4e69-a735-f5285567bf08", "indicator--7c2f083e-959c-4146-a460-569d515b57d7", "indicator--b19f3354-6966-4030-a47b-b90b2e0d7f6b", "indicator--9d7d49ff-0519-4a8d-a165-053494a0cafd", "indicator--8738e590-f613-40fb-aa8d-13915eb9fc21", "indicator--41966c61-4030-4adc-9518-daaf4a5bcfcf", "indicator--806808db-522f-4a35-8ae7-dc867d4491ac", "indicator--7175405c-869b-40f3-98ea-df8447af55c8", "indicator--e4bfc10d-0826-4fd9-8bc8-8aa7b46de903", "indicator--ac34260e-d930-43f5-8362-79055ffe8d35", "indicator--cc9bc610-6dc8-4b2a-918f-3138f7590113", "indicator--138c35bc-1f61-4755-bf92-050fc902e3bf", "indicator--56654b63-41d8-4650-8097-c3366759f760", "indicator--ac9a92d5-7523-4d94-9d42-69c2392b7b88", "indicator--9207e135-8264-4747-bfa2-2ced1b60313e", "indicator--18461c75-2d5a-4fb5-8444-5adc45021c05", "indicator--c4a121bb-6309-45c3-96d1-db37ef718aa9", "indicator--ec97b5bd-842d-4c3f-9549-75306aa1c4ed", "indicator--c7da2ce9-8a05-4868-8b02-68adfd821a89", "indicator--50555c69-064c-4ac4-80e0-7f30dd2efa79", "indicator--d3c43fa2-994d-4d45-a804-85e8507d1e25", "indicator--0bba9c2b-6403-49ad-b3ee-d220147c5aa2", "indicator--4668de8f-55a0-43ba-a01d-2217212a3ae4", "indicator--b9e7f91b-c3ec-42cf-a628-e58b9b64fa1f", "indicator--98dae5f2-ac2e-489a-9dd8-3016766285da", "indicator--9ee17f42-b612-46cb-84e0-0058cd62bec9", "indicator--25018c3c-455a-4647-aab9-167513069992", "indicator--6c45b135-3b86-4940-8795-bcd71e9fa536", "indicator--3ebab7c6-8d60-4d28-abf9-27ed48d2c06e", "indicator--2f77183e-6614-45c6-9da7-3a770cacd7b3", "indicator--ae341ebc-676a-4696-a97d-031d5d2ddf1b", "indicator--ef599095-215e-4e63-a19c-486020c6f615", "indicator--270ae16e-cc62-47bb-8cda-cd66fdde1c6d", "indicator--ddb86680-4e2b-4909-a0c9-78f0afffac6b", "indicator--a2845573-f18c-47c1-93c5-17f92ea8e184", "indicator--291e0bc3-b57d-4750-8e67-0c712ff90aee", "indicator--ed283c86-8ac6-4646-8c04-cd8e22ceeca3", "indicator--571af96d-a5ca-43dd-bd64-26ca0b44677a", "indicator--894e221c-277e-4658-a0f9-e551379d5f6d", "indicator--275eeaf6-2666-42b9-bc72-bb2f326d2d7f", "indicator--122e820f-36bf-41e8-9efe-4d22513f4592", "indicator--f7b08f46-453f-464c-9954-0165f04a1429", "indicator--628b5d46-d443-463b-8b33-6a476927eac7", "indicator--44ac1710-87c3-4751-85ee-55e394c588ee", "indicator--fad005ee-20b7-4a31-bb30-c67382311c9a", "indicator--6a219aae-335a-4d48-a6dd-54f6095e7f3c", "indicator--5434ff11-d17f-4a5e-b270-bb8b4b10571b", "indicator--74cf25f5-443e-40f9-aa0c-cbb469eba1f3", "indicator--b1906bc7-6b18-4c88-9bd6-3455dd3dee9b", "indicator--68954375-c5d0-4062-b942-dbd2271b4c3d", "indicator--007dfe2f-93a2-4770-b93e-e0e98f3b229e", "indicator--d331ea24-e9dd-4239-9568-1f855d88201c", "indicator--9c6af541-3c56-45e3-81ad-4221a6d1891a", "indicator--e7f9ef17-55f2-43bd-ba78-fc94540c7fb4", "indicator--3a52a4d8-0b2f-44df-b7e6-1cf5ca342310", "indicator--9b06ec0a-62d6-4b48-bb3e-f2af11f2adff", "indicator--1dbd6075-4e05-455b-b8e6-38d1af090f67", "indicator--3a638483-699d-4aea-beab-d1be9fbd47d8", "indicator--c1eb7df5-1ec2-47cd-80db-3076a7cd6575", "indicator--054c7804-ea14-4bcc-bb25-8cd488ffece3", "indicator--657f5ba0-d826-451c-ab21-23c5182f16ec", "indicator--9fbdceb9-95e8-4667-91ef-c70780efa0b0", "indicator--4df543cf-b77d-4141-a722-47794cb67c7d", "indicator--bf40b1b1-b40d-473e-b3ab-404aa0855ee4", "indicator--a2cb0f18-2cbb-44eb-a31a-a1eb596d14e9", "indicator--62eec88e-d843-4750-adb7-990eab7df2a0", "indicator--480b944a-0a12-41dd-9c5a-b89304cf2d1e", "indicator--18afae7e-525a-47be-a50e-11610b3c80a6", "indicator--e158aba5-5d5b-4c77-a2dd-dd81bae15137", "indicator--9d721878-3a17-43b6-b25c-2ab13c3e7ff7", "indicator--1d523bde-2c6f-472c-9310-beaae457b212", "indicator--c9f8a817-0c83-4e87-9836-e45f8385b6b9", "indicator--f500b15c-5e74-417a-8435-002c1877ab34", "indicator--3360689b-c853-4a70-b8f2-ad7601ff6415", "indicator--dc2db655-e9a9-4fbc-aa5c-7c30d5cb2ba4", "indicator--171650fd-61d4-460a-82de-de690ead9e9c", "indicator--d0351dca-32b5-4a35-9a38-514a4d5be8ec", "indicator--c257eb22-a715-4076-8f70-964432a5f4e9", "indicator--f58847a7-b829-4a5a-af92-a9a9747b2135", "indicator--ded4c874-9cd7-4b41-9642-bb7b753e3e9c", "indicator--ac66d0a0-e1f1-4c2f-a6ab-c9a31d417eca", "indicator--9a970849-e616-4aba-b083-b8b3e860559a", "indicator--e6fa4291-9857-4392-8296-b0d2380913c8", "indicator--60db1afd-b443-48b6-8150-947be4ea0299", "indicator--650e5025-5e6d-412a-a5f2-a770da6da312", "indicator--3801bd23-38a6-4e76-bd83-c602e3034931", "indicator--3867fef4-109a-4cb2-8d50-a8d8a45c0ff2", "indicator--17359c4f-b2b8-496e-b052-954fd0e9058d", "indicator--642a7525-705b-443d-9581-e429ad598a41", "indicator--c17659a3-834b-4470-8f46-78fec0d12774", "indicator--e14521b6-a12f-40a8-bcce-d7eb5489e81c", "indicator--efbf769f-737e-4154-a4ba-e9a5b41f45b9", "indicator--e4a470b8-a4da-4b30-aacd-b5630938e27d", "indicator--b03fae68-41c1-4756-9d37-2802d3e88ee1", "indicator--164eba74-9672-499f-83b9-0a2f37319903", "indicator--85415489-205e-427b-839d-04cab805ad9d", "indicator--041a5597-3236-4099-9fb6-99634006498c", "indicator--9f1655d5-67be-44cd-b43b-bd1ac50e8af8", "indicator--d98223c8-27f0-49e8-8601-bcfe5808aea1", "indicator--593a362e-f48d-426d-a39d-0b39758de54d", "indicator--44a986e0-20ba-44ae-92b0-76593ee00335", "indicator--80fa07a2-8a35-4448-8a29-db5bfcebe876", "indicator--ecb46693-21e6-45b3-91f1-22ab34bac9de", "indicator--055c1f3c-29a7-45de-8794-fa288c9f035b", "indicator--27c9e1e3-2de3-4f99-ab82-2291f8cd5f64", "indicator--3926b83b-2f38-494b-9b3d-fa199c43dfb5", "indicator--839273ac-1e5c-4831-b7a7-44092cd1f595", "indicator--cc66b73f-780d-4ef8-926f-46945350ada5", "indicator--6fafca7c-dfe4-424e-b7a6-d7b33db8b51b", "indicator--2bbb8a2e-5177-4cf8-a1e3-f9fbd20f054b", "indicator--8f387e28-2376-4f24-9b7a-9c162dda717a", "indicator--317e9b2a-ac30-480f-8e7d-ea4d8e409714", "indicator--9ad29516-e6a5-4c55-8d45-d5ce700c87ca", "indicator--7a52a50f-edbe-470c-bc8b-f980be21f0cb", "indicator--18a15425-c171-43ee-b4d1-e7a6b4fc129b", "indicator--509f9de3-312b-4f09-8dd0-0888c2f226eb", "indicator--8bcd08ff-63cd-4399-b96c-8a48e19faede", "indicator--704c3357-d953-43a6-b1ff-9693cbb607f5", "indicator--75bee50a-02c9-483b-b44a-7c67519823ef", "indicator--7f2e0ea3-5c99-40ca-8e6c-c2971df9b055", "indicator--0e637b5e-bb16-40f3-8031-3d8aed84b272", "indicator--4f50b013-174b-409f-9224-9fa44bda8070", "indicator--e2aac760-c476-467c-8235-ba6c35a11d97", "indicator--c5928ae0-b384-4138-9992-6cd66c583c31", "indicator--a26f34aa-d72d-428f-8650-a7f44a8d8ad6", "indicator--79f2700c-8509-4384-a624-d43b47b87ae0", "indicator--2048822f-f37d-4c11-8461-66a05f0b2343", "indicator--7a01c0f8-69dd-4679-92e0-ec32ed96baf9", "indicator--ab5d9702-02ef-448b-a32a-abebbfbfe0ab", "indicator--55a83cc3-d903-45c8-9e47-f9025b05c22b", "indicator--ea96eb61-a6db-443a-b273-1ce090cc7117", "indicator--bc5138c9-e260-4ee7-9b7a-ac97a8a7e2c0", "indicator--d29f4563-8bd4-485b-bd1d-e9c56d342ef9", "indicator--c4331f38-c79e-4319-b433-52abf8eca0a8", "indicator--b50b5ca2-15ab-499c-9f2e-c149d5db2f99", "indicator--a0f655b4-d492-4c62-bcd8-0a702a891371", "indicator--f2309b46-ee1f-4929-99ec-31e3e2b36cb2", "indicator--788ffe6e-36c7-43ba-baf5-1d7ffb8dd199", "indicator--8dd667f0-f592-47ad-959b-371ea7a65b01", "indicator--6ee1450a-c49a-4019-909c-977b72badad2", "indicator--61263cac-e9ba-47db-b32e-49cdff072d07", "indicator--52b179dd-fefc-4ebd-9251-ded6ab15b578", "indicator--6cec8094-b7e6-4943-bd0b-b6d7b4e2cccc", "indicator--f21dc153-447d-4649-8b78-caf27d39e7f4", "indicator--bd1edd4f-fa46-475c-b1bb-447d1c665f99", "indicator--00883a6e-eeb6-4d3d-88dd-4ac58314b5d1", "indicator--197b816b-5b51-4c49-9ea1-c6412932b18a", "indicator--7333713e-bf86-4d57-9555-93e62249d29a", "indicator--179467ab-9caf-48d7-94b7-cae6a6f24940", "indicator--ad6bac15-6312-4dc6-a5fd-23a50fc8effb", "indicator--81a73a91-819a-4dbd-be52-e8b81fce8e14", "indicator--fdc22b78-d545-48a0-923b-4f07d3162f38", "indicator--cac75207-83a8-4daa-a2d8-6a256b6b8ce6", "indicator--27ed7ccb-7862-4b22-86de-f551b77ed8de", "indicator--2ffed5a5-614a-4998-b9d6-932d0dd8c43b", "indicator--4ef20e32-4773-47c4-b5cf-ced35ae856cb", "indicator--833be80e-4141-493f-8190-2c16af20480b", "indicator--ecadff8c-caf2-4528-ac05-a217237be906", "indicator--fc744208-1f8a-48e4-a1c0-ad24d434e9d5", "indicator--497519b1-d3fe-4aed-af87-984e45fcbffb", "indicator--b780825a-d70f-4806-8ea7-b0000340e765", "indicator--9ec9de8f-c1b3-41f2-bf7d-932ab6a24719", "indicator--061f7629-cfad-483f-9396-363244677bc2", "indicator--295858fd-faba-4c7f-93b0-ccfd256fce89", "indicator--92310283-e26d-4427-ad2a-026e55d1387c", "indicator--a52b3322-b7b0-495e-9021-4290671398d4", "indicator--5803f1ec-fc6c-458d-997c-0f6114964518", "indicator--2519cd0b-e5a2-4fe4-85b3-864dbf7f3603", "indicator--bb604d10-d19e-439c-af5f-ecfa02be3f5c", "indicator--8623469b-a675-481c-9075-4445e875bfeb", "indicator--377aa83e-f602-4227-9ea8-30c5338c33a5", "indicator--040427fa-0dbf-4546-aae5-a5d41fb3f762", "indicator--ef3c039d-90b6-4799-acb2-e228cc37c3d2", "indicator--9b64e2d1-4b3a-4d51-8460-dcbbf614679d", "indicator--8033b379-12e0-4d52-9ebf-324eab956136", "indicator--83747acd-c1ab-4387-9408-9f0adea700ad", "indicator--8bb25634-a989-4387-af8e-60575dd0f0fe", "indicator--4b8dd2db-b526-4142-876a-2c596f4bb3e0", "indicator--f886622c-0ac0-46a3-a685-0ea7de054607", "indicator--bb50a960-0d4f-4224-94ec-34ba69631dba", "indicator--bb9d78f7-5947-4d76-bc82-d7d7ce1558bf", "indicator--f851fe14-131e-4a2f-aaa3-6f9aba1e1427", "indicator--938dbad1-6012-4a47-ac7a-b938f079ab27", "indicator--a4db0e67-c1b0-49ab-b024-b7f4c3634470", "indicator--c86ef5b1-42e1-45f3-be3f-227a6d297788", "indicator--b4079945-f20e-4b3c-a7d4-04da9537ed0d", "indicator--e68fb9a6-5fdb-4109-8f64-ac0c8b5f91b4", "indicator--d12d9a2d-4f37-43d4-8826-64edb3ccf578", "indicator--4b32cb64-1dd9-4f1a-b66e-796023e83d9a", "indicator--a1c5c47b-9abc-4e1a-9954-693646373ee9", "indicator--caad2a78-1662-4970-9fe0-1b9c0a34f7ea", "indicator--45e97bc2-ac55-44b1-834e-bc100a769604", "indicator--ee4764d7-2f59-4d38-9e8e-405f28fc1bb0", "indicator--f8a59c4e-25b6-429b-a256-3106156f37fa", "indicator--3892f56c-b1a0-4bd8-b18b-a291233a3121", "indicator--5751c6af-4f4d-416f-a902-466dfb5438a9", "indicator--11577159-1d5c-4236-af86-85d38b5a066e", "indicator--282bed44-c496-472f-af93-8cf98d4378d4", "indicator--ed3e1d68-87b7-434b-a86a-dd3376411e2e", "indicator--80a69897-c7f1-4fe9-9bae-f0ac8145b148", "indicator--2642c271-a67f-432b-9804-9500083ec4a9", "indicator--2b6485b8-2f4e-4352-ac2c-47cfd225b998", "indicator--b3f3ff41-ff58-4a84-9b7a-c214141a4f84", "indicator--1f0152cc-ae6d-48a6-bc13-2bdc48ecf5ac", "indicator--fb437bad-02ec-412a-9afb-1fb2b2616b76", "indicator--cd746312-8758-43e2-9d61-a276ea3d866e", "indicator--53ae78c7-f1dd-43b2-9912-d951db86ba4a", "indicator--6415704e-f06d-43af-ba72-357be84f5421", "indicator--9260def3-ee3b-4b6f-8b7c-064d211a74fa", "indicator--7591c458-7107-46cd-8e7a-16cda3a1e76a", "indicator--1bdf5786-e00f-4e69-8853-463655d52341", "indicator--2c4019ab-7bca-408b-8ecc-5f61edaa8117", "indicator--184ebb00-93f4-44a7-8abc-78eea207b037", "indicator--3774e8fd-e67a-439a-a902-057ac1a31861", "indicator--24ce8a02-f9d9-409b-9300-3854486552e3", "indicator--03c2bcbb-5216-4e1f-a934-ca35e9eaaac3", "indicator--ca48b8cb-616e-416d-a726-86996301dd6e", "indicator--72175124-9b5f-434f-8ae2-02aeb988711e", "indicator--ac5f05bc-b862-441f-a277-d1006f943edd", "indicator--0c0065ae-407a-42f7-b29f-a6d70335ecd8", "indicator--53468cb6-3f64-40b6-b77e-96cf2be8b36e", "indicator--48448fce-4dd7-4b0b-8007-735ca6e7eaa0", "indicator--9ab40001-7abf-407e-9cce-9a8923e3c118", "indicator--feeac26f-d2f5-45eb-b5ff-51544c9041d3", "indicator--94662542-7125-4b0e-8f51-5a0dafa2e7f3", "indicator--d88af9d4-55f2-441e-ad71-59a76976a7d3", "indicator--84deca56-4dd0-4cfe-a60a-f81b2a52a632", "indicator--0b30c813-acdf-4212-89d8-15355821b05f", "indicator--bd5d5edc-219f-4b6d-ae19-358fcee51ea5", "indicator--8bba742b-0da4-43c1-ac7c-50088c23cf0e", "indicator--96080f3f-dd83-4406-b483-1f4e62ea61db", "indicator--784b1e88-875c-4343-ab59-659304653237", "indicator--f7696782-9b96-4879-bfe4-516119b3f8b6", "indicator--84e39660-1945-440e-9576-c384cec78c94", "indicator--2f7e6e0f-eb3b-4b3d-a671-67946367c4b1", "indicator--32d58c8f-fd86-49fe-838a-cb4378e07b6f", "indicator--e25ad928-6c53-4294-9ec6-4da1ed014552", "indicator--f3a0154c-feb1-4774-a3b7-a14c226ea4b9", "indicator--155bb794-e456-44ca-98da-5d375f640dc9", "indicator--b1883b60-d447-44e5-89c9-0c4034032dcb", "indicator--19bfc91d-f470-42da-ad0c-b0383a462f96", "indicator--f2633528-4ff8-4cba-9221-e173bfe11427", "indicator--e95722b1-2ee7-455e-8da1-a8d04f5b5d0a", "indicator--6c7abfdf-bd2b-46a2-b963-e2beb932abb2", "indicator--dbe242cf-e43a-4593-a59b-c8fe3c206774", "indicator--58fe28a5-c9c2-401b-ad15-a38bc858f34d", "indicator--38e9e301-b586-4e14-a0bb-742d7d3c3de7", "indicator--30b93156-5b04-47b6-a009-9f7aa80bf9f1", "indicator--dfa6281a-8aa2-423b-90f2-483b5196ddaa", "indicator--17562d2d-87ef-4642-a9ec-2d3940eca8b2", "indicator--aee4002b-1882-4165-a7a9-2776bad99d3a", "indicator--67034843-8612-46ea-a88b-fb7f19863713", "indicator--507a635f-b70b-4700-b6bc-faa8139c2f50", "indicator--7aa03430-0f37-4164-8fa3-2ebd476003c4", "indicator--a1c13841-63f8-4099-98f8-ae16ce035b2c", "indicator--57fd2d84-bed5-44ee-95f7-4c35a3ff7a02", "indicator--bc646a06-3158-42a9-ab94-24001e41bda8", "indicator--f91791bb-d76a-4cc8-b575-0dd7d668839a", "indicator--36d9b55e-b791-4163-9288-b343254d6840", "indicator--061b04c3-0d40-4302-aa6c-6b44db44da8a", "indicator--3e349379-109f-4e6b-821a-5417c57298d2", "indicator--1a28a3f3-37d3-4278-b87d-49cb8fdab9af", "indicator--4b3c6953-8a90-418b-8124-0ff94b72fc42", "indicator--043a83fa-b3e7-4a61-a508-dffa3a50e602", "indicator--27ee70a6-69a9-439e-8102-d22c2e27d4d3", "indicator--a95f50b6-052c-4b0b-9c79-125569225c6e", "indicator--97f81dda-bb77-42c1-aa5e-349f98133060", "indicator--1101434f-7f05-424d-be11-3fbb4e4692a2", "indicator--64f81a8f-f59b-4dbd-a33a-b739bf72bcd8", "indicator--09825423-f520-4e36-b2c0-96e1e5e82de6", "indicator--b7082e21-45ab-4984-94bf-23d152e32b1b", "indicator--3b9b3f71-c573-4a4b-bfe2-02b5f640041d", "indicator--bca28a14-9991-4a16-b937-5d6c8c950129", "indicator--8eb36b27-df01-4f94-bb17-1b42b2fb23b7", "indicator--e001d391-f5e0-40ad-8b44-e78ceeaf55e4", "indicator--91047ff3-6700-42f0-8743-e6c4411e5f16", "indicator--62aa90e4-9286-4bb8-a25b-194e82ea495d", "indicator--a59ed5c7-edb6-41ab-a076-6fa840407b43", "indicator--98970f39-6207-4b39-b05e-fb4c32f879ba", "indicator--ec7e5dc3-449a-49be-afb8-9bdff71c218b", "indicator--de4230ae-06bb-42e0-b309-a294f1c1a509", "indicator--3d626435-4c7e-4cfd-829c-24c960861929", "indicator--093fde6e-6c11-4493-88ad-b1229fd75d92", "indicator--3a6f4f54-b700-4e0d-84d1-683aecc96afa", "indicator--15666573-2b76-4520-9a2e-3896db4aa0b8", "indicator--40f2c46f-8583-4246-aab8-466042b596c8", "indicator--351fe28f-2df7-4809-af05-7c2c8d15cd3b", "indicator--17e5f400-9f98-4be6-9c3d-42c1cbeb8ddb", "indicator--4f2ea64e-f909-4c71-9bc4-9afd161444c9", "indicator--f93e115e-6fcb-4c8f-b598-f9732604b976", "indicator--13a274fc-9260-4424-9c08-593f261dd2da", "indicator--60a52cbb-7b3c-4434-8139-e199997e0b92", "indicator--b9175248-a025-4c99-b174-664bce7255b2", "indicator--66eecbc7-7029-42c6-85d6-ec88e6289f83", "indicator--15ec6c3c-395f-4e94-bf8a-581fa6567020", "indicator--75cba11e-02b5-4aae-830a-a65017907c03", "indicator--ece11d11-0acb-4674-a9cb-afc7856c196a", "indicator--a445fb40-4544-4545-bc42-95640d2c948a", "indicator--8da5db3c-9541-4c8f-ac48-68dca7bbdb18", "indicator--c7d800ac-7116-402e-9e48-357f8afc1f68", "indicator--cf5d6c0b-700a-4317-b386-69655c4f8661", "indicator--b144a2cf-bc9e-4031-94da-390ba302e8d5", "indicator--cc860a45-9ab4-4f46-afa1-776b1f3f71f4", "indicator--6ee282d2-9765-477e-8005-17eca31837a2", "indicator--0131a6c4-1216-419e-bb91-cd81d58fa321", "indicator--35ca3a63-8534-4ac0-b2c6-3ca1e3bd723a", "indicator--587085c6-30c4-412b-b29e-7903ea191ce7", "indicator--51e0854d-7d4b-4dae-828c-c530ed6f1760", "indicator--f6fc940f-a2bd-432a-a0dc-5fb12ac773a7", "indicator--d38cca0f-cb78-4c14-a4d2-706be98277fe", "indicator--bd23670e-ead6-4b4b-a3d9-1f5424e15f93", "indicator--5e5b06e2-3d04-48aa-a63f-c266db632e09", "indicator--f8e30b21-0cdf-469c-a20d-0d9c1f9e8b13", "indicator--579dc745-70a2-4991-ba70-f15caabcae07", "indicator--a50d6c94-1781-4b3e-80e8-87d7f7da235d", "indicator--dc732ed3-aeb6-4c23-81c8-c057d8b6434a", "indicator--4cbab7e5-4940-4c7f-95a3-8031d7514abd", "indicator--c0f50bb6-73c1-40be-a201-45d1fd0869c0", "indicator--2201bcbd-6c2a-4b8f-acda-13e7879ea5fe", "indicator--f9aa4a12-78e9-4a69-a401-9a32040b6c26", "indicator--20789889-4345-4230-aaf2-0bec9b6f3f96", "indicator--36c615c9-c969-4df7-91df-25ab9b0196d6", "indicator--79996807-9803-4491-b27a-94c8e3101ded", "indicator--2b20303e-2861-446b-8e15-26b870e481f4", "indicator--9460cbdd-d82f-469b-94ec-89daaedb67d1", "indicator--2e9fc87c-e588-4019-87f5-b36ce4a1fb8e", "indicator--3ef0ed21-454b-417d-b033-e1fdccc24593", "indicator--ac98eafc-a801-4d63-a77b-2faf1a49ee16", "indicator--5bcc6c5e-b02d-4fcd-85d5-83474a7a877a", "indicator--54621ab2-86b6-452a-a75c-812e5b47706c", "indicator--9dea238e-7fdd-40e5-8de5-10f7facfa547", "indicator--95f9b171-27d5-4315-be41-ebc80b43bd60", "indicator--d1a0c2b9-1ff5-4253-9498-147656977d69", "indicator--f8fa5917-0261-4649-97e7-86b66ddfcf01", "indicator--d0e5ec9b-622b-4cbb-b140-bfbb967534cb", "indicator--70116f77-6bdf-498f-ae2b-3bbb4a31c5a5", "indicator--86320789-7360-4c42-940f-8a12a7ccd6a8", "indicator--c51fce20-9fae-413c-be06-5f47c6fe7fcf", "indicator--fe1fea80-dfeb-4159-937d-f87154746da6", "indicator--bfe5c325-b0c9-45c4-8c52-788f71c805d0", "indicator--7b98de25-74f4-4a0e-8920-294316436ffe", "indicator--156d477f-88ce-48bc-b8de-61541eb032ed", "indicator--b31bc9ca-0f32-4e46-96fc-b4c21cad30e0", "indicator--1080a2c3-6482-4dd4-9cd1-dba4e350b72c", "indicator--8a359427-c21b-42cd-97ce-353f21ba807b", "indicator--334e7d93-a3f7-4b84-ac1b-eb18ad8835a5", "indicator--26108108-a41c-4215-a40f-cbb5045b12d1", "indicator--7753c9e2-c7cc-40e8-b9e4-168e5b84e35f", "indicator--af744991-6b45-43ae-ab78-5dba3dd3ec6e", "indicator--dd112477-3ed3-4016-9d58-3b2de3bcf7af", "indicator--abf76a62-c3c0-4b9f-aa22-3d02cc618430", "indicator--0850a5e3-1fb3-4596-bca5-11fad65132d2", "indicator--f626bab9-62c9-48c5-a543-e251210cf19e", "indicator--b343c6be-5fc1-4119-acc2-707c12b39ee8", "indicator--ff08e9d4-d3df-4e6b-bd45-042e19e7bd78", "indicator--02247e4d-502c-4824-93db-39c0efde4d14", "indicator--27676b18-ce22-4f90-b094-7e44e62698d2", "indicator--c039a80b-64b1-4c67-ad44-c5fa73d530a8", "indicator--117f3651-281d-4794-a05f-2066258b5ebc", "indicator--6e2c2a13-4355-4913-91ab-37890db0ee0a", "indicator--e3667dd2-76f6-40da-970d-26689742803e", "indicator--e74e0898-e8e6-4024-b7de-b66c272c7f8f", "indicator--23a27efe-91b3-40bb-9d4a-f60995705b14", "indicator--265558d1-7d11-4e3b-b095-c50c67acccfd", "indicator--d8782f66-5831-4683-b31f-11be6319ad8e", "indicator--752e2bff-64ff-4013-b024-cac4260e279a", "indicator--2145f9d9-becc-4305-b4bc-f7ff46d70f3f", "indicator--b292857f-ecd5-4681-9503-29ecd6cb3528", "indicator--2934b98e-df55-4aca-aade-98a7540d8925", "indicator--3199c9b9-3deb-4f08-b071-4c86c6055ba5", "indicator--3f71b7db-a719-4bae-81cf-381552e4fa32", "indicator--335ea6fc-f915-4e2b-8639-4684566ac1b4", "indicator--61a06e69-8dd4-4a75-88d8-3fd79f9f0ca2", "indicator--c72cab9b-fde4-48db-b5ae-db9bf902a295", "indicator--e19bd708-8410-45e4-bbb0-6a5bc1948e88", "indicator--ca291fe8-61b6-45b0-abf0-852e115ad330", "indicator--a052e43b-d99d-4ffc-a0d5-13916667d752", "indicator--109765ba-0f93-4c7e-ad4a-be2d165c6685", "indicator--9f8289ff-61fd-4f4e-9bc9-6009fb1f49f3", "indicator--10708d54-8137-460b-a346-77b34bb86434", "indicator--7e7a3e3b-cc72-432b-a291-f577b4c77696", "indicator--ce2489b5-adbe-4dd7-9313-038dac742d65", "indicator--de002625-9e1e-40d5-bb88-76eab206fadf", "indicator--d6864939-3b6c-4080-87f3-1b16a9df6c0a", "indicator--f4251a5c-9ee2-4103-bacb-900449190c63", "indicator--513c3f51-0b12-4674-ac6d-f493efb1332f", "indicator--a81da991-5276-441e-a150-4939c23539b9", "indicator--1ca292c7-dce6-432c-99ec-4b586941f68a", "indicator--401e5a24-0e5a-488f-b600-67f6b820f2d5", "indicator--158db7fa-41a6-4053-8e81-eaff1c1abf46", "indicator--aaa85ae9-64ef-4616-9ad6-6891e7df0189", "indicator--38966284-1f83-4c81-b1cd-812920d8cd3e", "indicator--c2392eea-c11a-469d-a3ff-2dbfc8bab76c", "indicator--2fbf0d41-c49c-4fb9-b9bf-67635b55faf3", "indicator--9a9897bb-45d8-4236-a149-3d5f0f3c4b14", "indicator--eec5a7c6-c90c-4357-9177-c2a7a72c41a6", "indicator--919224b3-6192-4846-b722-627b08dd4ad8", "indicator--e1a4dca3-76b9-4c33-bb1e-bbd1740bec6b", "indicator--1e75cf92-b397-4177-9cc0-3a53530b4b89", "indicator--ee76ec81-3d14-4804-a415-9ee0958d7209", "indicator--621a0232-f283-404e-983c-8d4236b9e43c", "indicator--9c312d02-8cf2-4ee7-9898-6aa4db611aa4", "indicator--bcf3f1ae-ebcd-420a-b4c6-3c30dd936fab", "indicator--c48a0068-83ed-4d72-b84f-8609bf072bf1", "indicator--3d28da27-672e-44a4-8e2b-540d241df339", "indicator--fe4f58cc-2713-49bf-a816-d2f349c362f6", "indicator--a36b5d5d-4dd1-4d9b-a526-8736202ff76b", "indicator--5ca50744-d654-41a4-9f71-ba81f10db5aa", "indicator--a316d3d8-4456-469b-bbec-ddef46d64437", "indicator--f6b690b0-3fe7-4f29-a5d6-15a9dacc4b5b", "indicator--242e1770-e9e0-49dd-a6c3-a24eec8bf140", "indicator--cb9ece3e-9bd6-4435-8894-2ecfc4e77e01", "indicator--98db578e-615d-443e-937f-17779fe4a359", "indicator--e03c4549-ff16-47f0-85ae-fcf82c169abe", "indicator--3baae9ec-2030-45af-a276-9caa9079206c", "indicator--e5383f6d-d2be-43f8-8ab4-6e737eef614a", "indicator--f7025048-a89c-4d46-b7ae-1c74fcdc7c4c", "indicator--22ef99d0-e87c-4263-8813-585361f0f98e", "indicator--d27f86ee-4039-4dc0-90e2-2a1a0a4e513d", "indicator--91316803-eb66-43f3-8978-35b960023106", "indicator--87a9891b-3f36-4352-9a8f-dbd852c8bc5b", "indicator--ae6365b2-e3b5-4e6b-89e9-06503f34d80f", "indicator--ccfcdbb7-6dec-4d76-9162-c102bb7ff870", "indicator--2fb1108a-3863-4f36-bc22-3d6d9d685afb", "indicator--0896e5a3-8533-48d3-bd1e-347e13c3775b", "indicator--8ea6cb01-e3e6-4de4-a392-6318114a788a", "indicator--fd55fe89-4759-48f9-8fe7-ca7d4dfad68b", "indicator--5550dbd7-9cc5-46af-a3d6-07fc2ef60c27", "indicator--def4b5bb-22c8-4c90-abd6-747f58fbbe1a", "indicator--0f5df6b5-026b-4339-96e9-9277dbe98cbd", "indicator--9f5b1afe-24d1-49d5-a6c8-eb19253b2493", "indicator--abbcb265-85fd-462c-8fc2-0c9c6e76e4cc", "indicator--80617edb-c465-4b19-af88-53526d341078", "indicator--cea17cc3-163b-4d47-8ded-5f598753175b", "indicator--b737e253-b043-4c8e-886d-35e109d7fe71", "indicator--0e754b71-6da3-4c8b-90dd-9159a095a662", "indicator--f75b8cd3-5399-4fe3-88b4-4e6dbae476df", "indicator--f16e50c3-cce4-4068-8c7f-b805daee2e7e", "indicator--77e820d6-57d1-446b-8fe1-01ef86312947", "indicator--6f99768c-d502-4274-90f8-56ff7d9d2d2c", "indicator--4dbe2f91-df6b-4c47-83af-811b084a539f", "indicator--b2cbc98f-048f-4c4d-828b-1740fb666dca", "indicator--039f0331-90e4-4310-9958-1f1a7f875ccd", "indicator--be12ed7c-e9ca-4bfb-a0e3-3c91c0d7bedd", "indicator--ec88cd8e-e057-4eaf-a370-0c3041dd1f3e", "indicator--386c6f3f-32d0-4f66-8c38-4a39e07359f5", "indicator--966c8553-a51b-4027-a767-2b30efabbb63", "indicator--0697f2e8-04ac-4877-aca1-ead100090f7e", "indicator--74830856-2ad7-4e03-96be-05172520f829", "indicator--7e800a71-9d2a-4f1a-90eb-0c0f7c1ec77b", "indicator--551f497e-8372-48a6-9e6d-ff3edf8f2bf7", "indicator--6d23248c-06ec-47bc-8290-d2605f574d9b", "indicator--e2683a17-1040-49c5-bbdf-3e38707a23dd", "indicator--5a377a77-7301-4926-a2d4-09d8d9ead128", "indicator--20db8600-445b-4f62-9f87-cb859087858a", "indicator--a34dbdec-faa5-4190-b7b5-0e4dee1e2e4c", "indicator--bb377601-72c9-453d-857c-dd9fb90964c9", "indicator--a69c4b67-2139-418c-bd24-a3143da4dd7f", "indicator--510a216f-5f3e-4a4d-81f0-bc8eeb214096", "indicator--702d16a3-5f33-4cd4-85a5-086764c54eff", "indicator--a3ec8f3e-8396-42a1-8862-85e3f6583e93", "indicator--027264ab-2d21-47f6-942b-f5f1a2203e27", "indicator--2e3779ce-242a-4b64-a74d-a1274276f1ad", "indicator--1d46ba68-6fd2-47b8-8aca-896b48d356c5", "indicator--f55c250f-2070-4c94-ae7e-48299400fe72", "indicator--f56d47d4-1e9d-4629-83cc-7f1827940136", "indicator--62a91061-59fe-4b0e-aaec-e2c27f96186d", "indicator--624ec57d-ce5d-4a17-9f27-37339fa0015e", "indicator--9d0247c1-16e8-4c07-b758-3860c0da619f", "indicator--32f25440-7301-4149-aff3-7d86d926c608", "indicator--a80736f4-07cf-4100-bb62-84ac747eb153", "indicator--5fa51ba7-eb8f-4d47-93e5-ccceb560c310", "indicator--3cb70a18-5443-442f-9c39-07c648dba3d7", "indicator--3f25eaa5-dd8e-40b2-b26e-8f393b962cc3", "indicator--5d681059-ce2a-49f9-8361-46f4afd0fb20", "indicator--9cd230d8-a960-4ff1-9ad4-348857c51232", "indicator--92f43373-d52a-4e59-a74f-f1744cb9af30", "indicator--7473e2f7-1ac7-44cb-8357-9c9b13ab3e49", "indicator--b60cc6bd-4ea1-4f04-ad29-ec8506dfd3fd", "indicator--13a8db2c-90bc-4701-a01f-e5d9c2958e62", "indicator--0a67c4ed-8a25-4729-9cf0-59e9f13a956a", "indicator--6febaf47-6532-4ed1-b19c-10cdce0fa2b9", "indicator--362cbd8f-39e1-455b-8b0b-51b2997a098d", "indicator--632446f8-2647-4636-8a2c-1b0a400d46d8", "indicator--13135763-0b82-4cf0-81f4-79ecec1e726f", "indicator--42e635f9-013c-4b01-9352-3de3568290bb", "indicator--b57b47fe-bde3-47f2-9a4e-1f2b2df1d049", "indicator--429755a1-abf8-49b7-b120-dcf0c3b5f9aa", "indicator--51207a25-c62c-4aae-882c-38e2c1cfe96e", "indicator--c951427a-3a4f-414a-8d9e-e826dea99658", "indicator--450e76eb-d299-47ff-924e-c83dc2021f83", "indicator--c8961a10-77b7-4bec-9ed7-d25b1f5753bc", "indicator--56e9c6d2-0c06-4506-8de0-83dd9574e0c4", "indicator--90733ce3-189a-4ae5-9a5e-8921223d9fac", "indicator--bc9a36b0-25ee-49ef-bca4-159af3d4e4b6", "indicator--992dce87-32b7-4fb4-989f-291ed5a3f666", "indicator--3b0d59f7-a830-45f2-b70e-20020d42c09a", "indicator--4ffad35f-0fb3-48e0-8c40-d8997ce94e9b", "indicator--bf98d270-a949-4631-9d3e-851b0ac693aa", "indicator--e3c510f0-3321-4ed8-bc77-2b7ddf6237c9", "indicator--2f3a4d7f-ad89-47c4-8dec-3ee3e59a9cb6", "indicator--9174bb44-bf2e-417c-a891-6e910cd59656", "indicator--77df95e1-d785-4e92-99a3-3b533d76fb4a", "indicator--8b689994-e057-42ee-b132-61f0689a3b80", "indicator--afbdebfa-16b2-4c69-b3eb-75a137727e9c", "indicator--1bcec044-79b2-437e-8c31-ea010fb15c41", "indicator--2b6606d1-1189-40e5-9268-e04cc015ea58", "indicator--156f0e9f-cf4c-4da5-833d-7dfc34fab7c5", "indicator--c9ccdc13-43c3-4d80-9162-7fcf7fc97bb7", "indicator--b5dce30b-45e5-4d32-ab6e-714bedd1b3f4", "indicator--8a3fbd70-09be-479a-95c9-6104d466a72a", "indicator--f69a5f61-b9db-404c-8e0c-aa6fc3568d71", "indicator--2414972f-63c6-46bb-a7d2-c0921fa28f06", "indicator--e5157be6-9d91-4a7a-94d3-33d38e982d1d", "indicator--00cd2b90-757a-4691-9124-552b8129dc12", "indicator--e87b3441-f5c3-44d1-b22d-c218c5089c88", "indicator--4f7bf96d-5f44-4400-b8fd-e20e50e65e64", "indicator--36b850d0-1d3e-4d21-9a62-d279a510144f", "indicator--3ecfa4ff-67c0-4d79-b428-2da5d40eda15", "indicator--a25d9807-421e-4290-b684-0173b9e33bcb", "indicator--f1e5329b-402b-405c-9726-b61f1042b18f", "indicator--49d22171-22c0-44bc-a323-015670912c19", "indicator--e606024d-de3b-45e2-acfa-2c2a12863364", "indicator--648855dd-41a4-4e3e-b54d-3883adefd66f", "indicator--32845a74-275b-4de1-a7eb-cf0d4b277b74", "indicator--c503ef04-de76-4c12-8954-f4d44b218f2b", "indicator--03d27e9f-3288-4d73-844c-013ca35128e6", "indicator--eed678a1-7fc3-490c-a4e6-5e700a214395", "indicator--544528fb-b8d2-4334-9504-d18f64f5c6f2", "indicator--6d9e1ff3-2bb2-4104-8d17-f0f1e2d60721", "indicator--d42552ea-e5e2-4e7b-9ae5-854a21590ee3", "indicator--c5280d02-3a84-4dc9-ba9c-2714a25fe3ae", "indicator--90c09fcb-3513-4e37-b1ab-9779a6d13a43", "indicator--d219a15b-8a9f-4384-bebd-530bb6c0ad0e", "indicator--bb147bae-227f-4b4d-9bc5-1186b2ed1a11", "indicator--56c4e3c8-9738-4568-a71f-29d47cdc5587", "indicator--e4cb48c0-18e5-4e55-88f9-2730b90358ff", "indicator--f382de1a-6d2f-4c5e-bd32-58555e277b0f", "indicator--f31866bc-e2af-45b1-a80d-bce4e0a9fb5c", "indicator--594a94ae-bf16-4b2b-8287-c5f5d5c7ef14", "indicator--3776d9ef-65c8-4535-ab12-bd2a0d2154a4", "indicator--e82ae7af-d709-4bfc-ab5a-c6e4fb5b5e84", "indicator--1a8a0937-3e5a-4fb1-ad93-83341640b70e", "indicator--063fb022-cff4-4b5e-860f-0722e4b34a12", "indicator--44e36118-08f9-4271-bebc-fdbdfd0a5d01", "indicator--ba91ecef-b72e-4c83-85c5-e44369aad373", "indicator--c57bb391-dd1e-4268-98ba-042235f3e96b", "indicator--84433786-9c78-4c8a-8f37-f5bbe0c28d7e", "indicator--d7f40f50-afb9-42f3-a49b-3a1dd0563885", "indicator--c14c820d-e069-48ff-bdf3-131709557444", "indicator--7373267f-0290-4f31-ab41-611c0b5bdf70", "indicator--df201aff-3c6e-45f0-ac74-228a9d5ef7e2", "indicator--dc6a3b5a-f6ff-4a37-ba7c-26537105d86d", "indicator--25f1388d-6113-43c8-892a-ab9ab5b5d914", "indicator--c5226cc7-fd94-4b09-98e9-3a4ed9d3e7e2", "indicator--052a0b37-e49e-4797-8548-83b2ff642823", "indicator--8b29548c-ce8c-4add-8529-c1b629439e5e", "indicator--3748d554-5f40-4059-87b5-25b2250091e8", "indicator--19ed0dc8-10e9-4570-bc3f-bfb7771d42ac", "indicator--199d36dc-0776-4df5-9592-a467c4eaaacf", "indicator--c6dd3c46-d270-4fca-ad46-317aded19e50", "indicator--78c1aeb9-ec4b-4764-9919-2bfff6a57d1b", "indicator--92452023-baa2-4d7a-a30f-70851dbbca74", "indicator--a511faa0-f05d-4410-8046-fe92efa92601", "indicator--a88e59f6-9232-4bde-a972-9f3e08ead059", "indicator--d3509573-24b3-4dbd-acc7-28a5aa88f15e", "indicator--3cf1bb25-148e-43f0-a3b1-11b399752766", "indicator--e32abd9a-8b0d-44f2-9a80-355b561cd466", "indicator--ff80bb68-8f62-4c8f-9c37-3d11867b9dd8", "indicator--a8ea1650-5c4c-4ed5-9c6c-3f02e1fafaa9", "indicator--6db995c1-62ba-4209-beda-65855a3be1ef", "indicator--4e8e665f-8e08-4568-9b47-5131fc003910", "indicator--fde046f5-9761-420b-b301-6a49db8c0e9e", "indicator--fb2f47f7-82a6-43ff-977a-c33cff0dc14c", "indicator--d7e1c866-46a2-46be-b994-4d88feb8d95c", "indicator--259a6f01-1721-490a-861e-969aef5839ee", "indicator--89536bbc-8586-4611-8638-dffc96584afe", "indicator--9e16da83-2d93-40bd-988a-1c77027dd736", "indicator--3a1ad158-b43e-4a35-8e15-a966d74db82f", "indicator--40537435-f28e-4df9-a303-5fa665271d5a", "indicator--9d70cac0-5ae8-4014-a6d4-29bc55312299", "indicator--cd93e3f3-ce6a-4a71-8cbb-22da84aae73f", "indicator--f376939f-634c-4d6c-bc6b-e3a285001793", "indicator--0a7cf11d-ff1a-4d5a-a2ef-fa53f32e4653", "indicator--3f2458e1-1ece-4b94-a834-658f1443b192", "indicator--6624e910-4456-495e-81df-74d291eb94af", "indicator--7be65b8b-497a-4c95-8ce7-135d205caba0", "indicator--b59f0e2a-aa96-45d8-878f-457a8592eff4", "indicator--9cd11f40-3191-4d30-9279-f171f551d6ff", "indicator--b7c08a44-c8f7-423f-8c0f-c30447aea3d4", "indicator--29abd4c6-6a5c-43eb-95ad-7bdd225e3fdd", "indicator--8d5b0231-1136-472a-ad50-5384cf73961e", "indicator--85a261cb-92df-4b67-874f-793472602ef4", "indicator--af825dbf-cdc4-4bbf-8463-9cf1cc088e92", "indicator--a830c7ce-d02a-4ca3-a430-cb15faf4a33c", "indicator--4df43efe-1e14-488b-86bd-a9922ace3e17", "indicator--b431d9e8-ec1e-432d-80ea-4530791bf8b7", "indicator--0fda129a-0b79-42a2-9f5b-c6b5f6abafd7", "indicator--d43d03a3-d02d-4c42-9182-dec9fd8c412b", "indicator--bc8497ec-f2b9-48e3-a8ca-f672a2c1153a", "indicator--223c2953-d63a-4d18-8b53-1e726f8e5b13", "indicator--a9b6337b-dd2a-4ebe-98ee-81accd1a5e58", "indicator--1da57467-7f62-4151-ba86-8d354a9f76a6", "indicator--08292aaa-04f6-4634-8fad-13c8e610bffa", "indicator--45d347fa-9e84-4d56-8835-08f606a96205", "indicator--d665e48a-5c68-40e1-9312-b794fd5a041e", "indicator--dac07909-f330-4497-9f53-7c77030cc2c5", "indicator--ff41274e-08d7-452a-90a3-b6039e075dc8", "indicator--444fc9fe-9372-4ae3-b2eb-2705282b5a20", "indicator--db44ad6f-05ab-4851-aa26-6a722ef3c2b5", "indicator--74f21cc6-7c6f-446c-bde0-57d392811888", "indicator--9e98605e-a236-46cc-a329-d9c443c329ca", "indicator--c7beeb54-b727-4c83-8113-878165befc07", "indicator--d099be71-e8e8-4f2a-b856-aecad9f78a44", "indicator--49fb84c6-b7ad-4992-8b22-bcd8529152df", "indicator--615db431-bbc9-4e3f-ae92-275d6187ffd9", "indicator--1e78b2e7-422c-4a24-82e6-86fc0de0be79", "indicator--fd77a869-d03c-4a95-a50b-e41d5f79f690", "indicator--9d43c3e1-de1e-4026-811a-3cfdef1fff8d", "indicator--b3eb7238-4421-48dd-9413-c24836c1efd3", "indicator--57c43a61-2e96-4e60-912b-5cbcc752f6d2", "indicator--23c25efa-72e4-406d-960d-eff1aefec7cf", "indicator--dee87b02-52f3-4868-9825-ac76f6e8fd87", "indicator--a25d58fe-1466-4aa6-805d-9154296df595", "indicator--0aa899b7-95fd-43f9-aeb5-de79149cb77e", "indicator--f965da3f-dbaa-4f85-84f5-856c75e94921", "indicator--e5baa147-f35c-4015-87a5-0881d68ec042", "indicator--94a623dd-4abc-4939-94bd-9b134b79c4e6", "indicator--776b26fd-d0ac-4ef6-88f8-b036eb28f0e4", "indicator--0409ee07-a2eb-40bd-b245-0e0fc8b9d352", "indicator--0bc3e07e-7076-495d-89a0-644494fdc9ed", "indicator--f1024843-2175-4b53-a2b4-c7a919bcc924", "indicator--f44550a0-5be4-45a2-8658-fd3ef3869a75", "indicator--2a51012c-bff4-4fb6-8e47-47432b904115", "indicator--1e0db028-498d-4aee-a9b6-5f1b66eb0e6e", "indicator--c04eb136-358b-4ae3-8be4-6497229b6140", "indicator--abf98b25-bce7-4116-8def-b6ba28b19371", "indicator--32158fe4-92ba-441e-8565-71fd12e4abb9", "indicator--b55066da-1495-4a58-bcc9-bdf5fff93ac7", "indicator--ea3b0cd0-9d91-4351-a0cb-0cdf850eefa2", "indicator--1490a1b6-c525-41fa-8957-bbdee42e42c9", "indicator--aa8d8e3d-522c-47ef-b4b5-ad9bd0f55429", "indicator--708fc54d-2ee8-40e4-bee7-7f826d6bfe7e", "indicator--9d186c91-3d65-415d-91b0-0c409d70fa57", "indicator--ad0cc624-e486-4713-ba3f-4041b268c1cc", "indicator--8f6a991a-a86b-420a-89e1-63b601b8c3d0", "indicator--a22836fb-1e27-4f74-8412-a357861048ac", "indicator--8c18a50b-8606-45dd-890d-673c72bd0d13", "indicator--acaa2139-d963-415d-b800-fe262b249499", "indicator--88add171-79da-4ca1-8aec-78a2e1280ff1", "indicator--c5acf47e-6c93-4720-ba32-ebda8e7b1991", "indicator--6aca4f02-5a4f-4dc4-b763-d1df6cefe915", "indicator--c5b2bff6-cce7-42e3-86d2-d5cd703928d3", "indicator--dda5a81c-ab66-4e54-afd3-fa64745073c3", "indicator--bc0230d6-29cd-4fb5-9bfe-8f00326e3289", "indicator--f1c6fe79-0826-4f29-b8a6-ef434b18f787", "indicator--499b59ae-fbcb-407e-8701-c1ae122f64d1", "indicator--70291d67-1efb-4e09-aa3d-444c26ef70e7", "indicator--ba8c7b8e-62f8-49a1-a7d1-2b312668c3d0", "indicator--6b847f3d-f8bd-450e-ab00-0c6d45eb4d37", "indicator--bf574f7a-f3ad-402a-9549-64cef3601e1f", "indicator--de0983b3-bd8f-4b62-9cdb-1b78d1b1e9bd", "indicator--9dc8e8ea-3eb2-42c0-9b20-40114e318d95", "indicator--ff3412ac-a948-4cae-9578-d8f63b4767a0", "indicator--a4981d3e-e160-41f6-b11f-c01f21dff3fa", "indicator--da3597de-bad1-4afb-850b-4c13431e2894", "indicator--fc8bad76-13c6-44c2-9e1d-645786c04a96", "indicator--33cc762d-a523-418e-afac-b6799301652a", "indicator--d42abad0-a29d-4402-b621-ecfd18698bfc", "indicator--2a228f70-c14f-4c47-bbf1-12912d166b0b", "indicator--aceab4f4-6c36-48e2-9115-93340abc921d", "indicator--ed761812-ec2a-4093-b2fc-1631b55e5f5f", "indicator--2fa75107-29ec-47b0-8526-a7c3e4c4ae69", "indicator--1ba1bbf5-8b6b-431d-8fde-6714c8db4e00", "indicator--23180d05-de9f-49b2-9755-096df3c1a714", "indicator--fcb6b1e5-ebc5-4981-8c01-672495334edf", "indicator--30e8ff31-893a-4bef-b032-de2437663173", "indicator--464154fd-3695-4bc5-912a-d8f039501fbe", "indicator--e26b8b9f-3643-47f0-830a-6954ac5a50f6", "indicator--69205609-f7ef-4481-9cb0-923cee4c8c24", "indicator--769ff241-f1fb-4d9f-a25a-7a541e694747", "indicator--92e9f3e4-e86e-431d-9891-f2351b49232f", "indicator--1464bb02-1752-4e32-a660-58ab720bd516", "indicator--6f3ab4c3-1dce-4d60-b277-61cb413859b2", "indicator--faf45e49-7729-492d-8e40-6791601c5a80", "indicator--07c9f429-14ea-4d94-924d-659fc7f1aa0a", "indicator--f4d31b58-4f1c-4dde-8bc5-843e144e126b", "indicator--9b8b6aa4-aee6-4c6f-946c-0d14202c7d14", "indicator--5c88a36d-1462-4cde-83fd-9a5dcd90b4e6", "indicator--e4a0c21e-a37c-4857-9bcc-1ac55b86ca71", "indicator--d427b4f0-79f8-4c63-8489-bafb184c8d47", "indicator--4e0fcfd3-bc45-4f5c-a661-707eabee99cc", "indicator--bcf2508f-3daf-4fff-81d5-79e895764e17", "indicator--e8672ed0-85b9-461a-b242-6015561f63bb", "indicator--3b305d04-45c8-4320-8b1c-9145ececc139", "indicator--2293a669-17a6-4cd4-b7e5-ebd796146792", "indicator--65869eda-1e8d-4665-913e-9da7aa0bde6c", "indicator--ae3c1e58-02a5-488d-8261-6093c7c9dc79", "indicator--c3997f43-dc42-4e4f-85e5-40b350c81a5f", "indicator--0ca98f25-ba5c-4765-a1f8-a2d91230624a", "indicator--c6b277c0-a1e8-4067-8025-b2b805d6258f", "indicator--d90bc3d3-b0af-48e7-a7f8-72b6e79a4c94", "indicator--3e0bcbf5-dcfb-4f17-91e1-92bbd96ffbda", "indicator--87c3dbed-a138-4e22-a702-fdc1d4886f37", "indicator--43670dd8-4593-4dca-9024-2d3d45cb8dae", "indicator--853a417c-84f9-4c92-bcdc-19310fd76065", "indicator--8fedf5c7-91d3-442f-9ebe-4df8f76429ad", "indicator--e255277d-9785-401d-b915-1649d75adfb3", "indicator--594cc809-edfd-48c6-9475-94ce47b30d4e", "indicator--66224b86-daae-405a-ae85-76bf8d51befc", "indicator--a5c1ae2e-10b0-4c2a-aace-e44f6a0ead87", "indicator--a44271bb-2500-4372-a930-8548c841437b", "indicator--da5067f3-954a-4805-a97e-ca17ceffdedc", "indicator--4697e0e6-5edc-49ef-9c58-536d9745c1d1", "indicator--26fba9be-bee5-4006-a6d4-fd8fffc42a15", "indicator--debad532-0972-42b9-a7b6-0bba1f00963b", "indicator--654766de-341a-45b6-b817-df213908b496", "indicator--2571718d-0017-42a4-9ffe-d34e7a96595a", "indicator--e7a475d3-12bb-41bb-84f1-3ab845e30e55", "indicator--eadaca46-6152-4cfc-beba-b435b9060711", "indicator--1cb2c4a2-9d9d-4cb0-aea8-b651db691b96", "indicator--48c856bf-6968-4f70-af85-1459be999ee7", "indicator--33990e40-3d90-4451-82cf-16fb1dc01284", "indicator--b7ec7fd6-1e42-4f96-badb-2c3df19ee3aa", "indicator--f41bf19f-5c2f-4335-8720-6338729ef759", "indicator--40be1475-3698-4c59-b821-e70dcec904ea", "indicator--c9bee0ec-9d35-4936-96f4-fbb5e1135a2c", "indicator--17dcf868-f289-45a4-94aa-a14708edf5e7", "indicator--e846036e-0fed-4dc2-a1ed-9ef0116fa59a", "indicator--0852be03-271e-47c4-b93f-cc19cc0bac25", "indicator--f71f3067-0d00-4f65-bc26-2a6fbbca003b", "indicator--8a70c4dc-0cbc-4c11-a5f0-a3f614ac6361", "indicator--ee5e723b-2298-4348-94b1-600da1c1dd20", "indicator--bf12ab46-e0db-415c-bb4d-3f7608693a7a", "indicator--b097c260-91a2-479f-9ee3-9b57f98a37bc", "indicator--eadd6329-70a6-491d-b491-07090d748088", "indicator--5d0486ec-23c1-4dea-95e7-72aab916c31d", "indicator--a75989ee-47f2-452f-96a8-7cda537ff924", "indicator--d42d50b6-b4ed-4f7b-9b04-420b53889ed3", "indicator--0c88350f-111e-48ea-9280-e106feb564bf", "indicator--cdb1111d-f03a-4b14-9a9f-ea50728a03f3", "indicator--74610633-004e-4890-9601-a713fcdb8050", "indicator--1905b8d7-3040-41be-8c1d-d6e55fe5b2a6", "indicator--46443093-b9d7-4f85-b568-9df70f470c95", "indicator--00c65ac9-8bfe-419b-978f-100245556daa", "indicator--0f762e28-b601-4d6d-b594-47c083df0739", "indicator--68902bcf-6392-45c6-9514-08d3f74eaa98", "indicator--84038dd6-ec9f-4cf3-99b0-11d4c8499ea4", "indicator--57adcc78-6aab-442c-a204-df43ef288a72", "indicator--0485ed06-fa2e-44e0-9330-92a39a48d7ed", "indicator--219fb267-e841-4d66-8233-39b32c351022", "indicator--8fbe61e1-ddfe-4700-bbd4-b3b0c4128285", "indicator--d226a999-223e-4f43-8e0d-809f2d057eb2", "indicator--bf834a77-2cc6-44ab-8f2a-36a0185e1093", "indicator--8b83aed6-d293-4e0a-aa63-0f3a115d1898", "indicator--f7ab93aa-3f31-4b91-b46f-b35b78328000", "indicator--45229890-257f-4b74-8e47-9e5dc5002baf", "indicator--c166ebf9-f2a0-478e-a8a3-260a9d464c09", "indicator--f6fbeb03-ceb6-4350-9a0e-e65aaf32dcf4", "indicator--ccfec88e-be17-46a1-a8ce-49f1489069e8", "indicator--1884d5a4-5f19-440b-a5fe-406facb3e439", "indicator--a48aa360-bccf-48bd-bb00-82244b8b051f", "indicator--0c4921e8-ace8-48a0-bce1-62f636b26a11", "indicator--da04e97c-3a6a-4afd-8895-ae8c3211351d", "indicator--5f7110b3-9273-47c7-b793-0d821c30bac9", "indicator--352c6e11-8115-46fb-9f03-259ab5ac6cec", "indicator--2d1391fd-b62d-4b34-ac32-1daf6f098763", "indicator--a8ff815f-42a3-4b13-a3b8-53d3549d6c56", "indicator--254dc893-5db9-43df-9608-dd21320b93c8", "indicator--69cc5a4b-dc42-4c8f-b4de-0f65a3068186", "indicator--a7a615f0-dc05-4a42-ba61-9d7536bb2a7a", "indicator--7015ef6c-f9a3-4375-8171-b68c3f06dd26", "indicator--bd62c7ca-b203-464b-8b47-c6962acc0562", "indicator--45b3a02e-a352-4905-b6f4-58fd17910935", "indicator--6991f514-9b8a-4a77-a730-0379470dee9e", "indicator--407787b4-7f8c-40f7-a1a0-a47b8ee791b0", "indicator--fc5b380e-943e-4041-a4ee-794f87c6adc1", "indicator--261063e4-ce19-4ebd-9206-cf7508586bf8", "indicator--657d846a-fe15-4062-8ab3-c6d6a7e15d27", "indicator--8391b6ab-1681-4dfd-a693-136782e4d7e4", "indicator--6c7acb7f-22ec-49d0-8338-b62c8c8481ad", "indicator--0882186b-c97c-4539-9ba3-639955b8697e", "indicator--275edaf3-45ef-4484-abf7-e7a41c7f0a0f", "indicator--4dd1e71d-ad40-4841-9905-6a0d5c1de71b", "indicator--3d6f8d44-7cb2-4e90-a35c-5c24de09bb6a", "indicator--7c64a39e-99be-4bf5-b152-72bbf9753883", "indicator--c6e83228-9538-4f14-ab4f-7158c37c81fa", "indicator--977db046-287c-44f9-8732-96c2475ae903", "indicator--c505283f-5331-4bfb-8252-9d8e28ebcd99", "indicator--c7091397-9c25-42a0-b3bd-5d048c5e6c40", "indicator--d3f631b7-30cf-4315-83d8-bc11e74934b6", "indicator--1bafe8ff-8e5d-4c67-9096-571ef5427492", "indicator--f2d3389f-61fa-4387-ac3f-c3686992ea17", "indicator--fe56da38-cc82-4a56-845a-0f585ebd7763", "indicator--47962720-1c4d-4673-8325-7f37410aa567", "indicator--da1773b5-fc0b-4ebc-bb0b-24f4b31cc2c0", "indicator--5b3c0b90-1593-4b1f-bd22-7ac1824ce011", "indicator--a3683fd4-00ca-46de-8d37-8fccf318bca0", "indicator--cb23e90a-07bb-4a67-85c8-a823e0f49926", "indicator--808df7bd-1ac8-4ab8-96b6-b401ecf52520", "indicator--9ab49595-2429-4e31-abb3-b071d7a30d58", "indicator--18841ed8-cf0c-4e76-8625-aea02b7157f4", "indicator--a0df26bd-1d47-4ab1-ae84-272414871740", "indicator--93212016-6389-4b74-9b71-6c081d3a0666", "indicator--6a5605fb-0323-43fa-9a31-fa103d618b98", "indicator--3aea0724-03c4-4a2a-bcb3-9c979bc1bded", "indicator--d3174e8b-349c-4cfd-9ded-73ec0c22f661", "indicator--94bdcf33-eaa4-450e-a5eb-0789e02afdff", "indicator--70b1f6f4-6397-4c84-bcdf-7bee2a1634b0", "indicator--9b394f67-2e2c-4387-bd3f-8b6f64ccc4df", "indicator--83e3e6f3-30c4-4e01-a0ed-bf8a99adc843", "indicator--0d3d30ec-2e94-483e-bff9-50c9c6ded268", "indicator--b1e06e66-883f-42a9-a02e-96cd32aa7645", "indicator--76300d9f-2ff7-4fa5-b5dd-23291a2924c4", "indicator--e8348a0e-cab5-40c9-93cc-97ce1e0503b9", "indicator--365c1261-e0f5-46f6-a126-e33f1b2ff149", "indicator--9bd8b763-4d25-4714-8a17-8d73de100b73", "indicator--7c19a04a-6921-436a-aeb6-96df77c9ae59", "indicator--c8ad32de-51c8-4b00-943c-a90de4d3b634", "indicator--679046c0-786f-49d6-b30d-1c5f53b372d9", "indicator--7b4a9de2-0c8b-43a3-87f0-c4ff613e424f", "indicator--fdafda4a-501f-4d5d-97f1-9e2c034a35c4", "indicator--fa3d15ec-0d03-4edd-9475-4b6cb4c4dad8", "indicator--1f202722-276c-48a1-917f-9ba06718862b", "indicator--6eef7b36-73ff-4cc2-a2a6-a9ab8a64711c", "indicator--f4bdbb66-e063-4de0-bf49-b9c3485963e5", "indicator--fdc5b001-82a0-4116-8d23-b091957168a7", "indicator--30342795-67a7-4d21-b1e9-1b2269e7c67c", "indicator--bfdf5aa7-4a1a-4e08-b94a-ceb68b5f3cbb", "indicator--b1100800-7c0b-470e-ad37-12cc182c33db", "indicator--096de0de-83de-4067-b652-595c31b2216c", "indicator--69fc326f-e83f-4839-9663-b660437e843e", "indicator--c22dc258-cf7f-4ad3-a85c-6615550437d7", "indicator--4e3956df-72ed-459a-9360-30aeb8a4669d", "indicator--967876c8-ace6-4e44-83df-59df17ced962", "indicator--d91607dc-fc82-48fc-8693-3c7134d49f2b", "indicator--6de4eb3b-d8e8-4ffb-86b0-f08684609354", "indicator--75532147-1096-4c94-a8df-6d5ab83bdf7f", "indicator--34c843ee-2ff6-4071-9ac8-bc5d33458c41", "indicator--6f42553d-ddae-4d1c-bef2-b6b2240c7790", "indicator--2329f5a5-891c-4dab-abb0-560f0149136a", "indicator--9c80d4db-4f57-44f1-a52d-7987930f090b", "indicator--e9be430d-8854-4a62-bbd3-8ebffb3e9549", "indicator--93337dcc-5943-4c4d-b39b-8173c34b5c16", "indicator--b0fbcb92-571b-40c0-9c35-b80dacd6db1c", "indicator--72eee1ad-edf5-4515-a771-cbf2bc0d341b", "indicator--190b4a38-0736-4805-9319-a91ec241ecc5", "indicator--d8d0b467-ba68-4503-a127-5837ce382f7d", "indicator--a945a1ac-cd6b-4195-a3fb-bc9951aad950", "indicator--5b745cc0-0f43-4a26-bc78-44c78dad1208", "relationship--514c64cc-c621-4af9-9fd0-e26a23544a9b", "indicator--2d10c006-aef1-48a2-9628-95de554bc15d", "indicator--e4e4abad-3be7-47e7-8c99-0437c4f1f749", "indicator--00d790a7-ab1e-4226-a6d9-3e2764ec0b5e", "indicator--cb4b40e4-f96b-474a-a606-729322aba911", "indicator--dc3bdf76-9458-417d-b7f4-03c32c8628d6", "indicator--7d240867-ed75-452f-9645-4318df06a170", "indicator--969395bb-edbe-485f-8929-6c875b89125a", "indicator--aeea7910-8cd0-42aa-872c-28f4af02ee47", "indicator--0c5d9c62-1b1e-429d-ba6d-fd340e17e831", "indicator--2613907b-6ef3-47ab-ab02-5b0d679b8865", "indicator--c4942afa-7130-46c0-8215-644c1bcfc89e", "indicator--4d77668c-a7a0-4247-9ea7-09dab6aab044", "indicator--762537cd-36c0-4c25-b044-00d507ff9636", "indicator--a7504559-c0f1-47c0-9dda-1017a7c3738c", "indicator--a422686d-fb07-4fa9-ac38-2308ef246234", "indicator--a22653e9-2216-4c71-964a-93a1d93b4fc6", "indicator--ea0d23ff-faf3-45b8-b270-4d733f40b3fa", "indicator--840660eb-f25f-4363-99a6-6751c4cacb40", "indicator--54715037-8e7e-4c4b-a41c-907cc7550f26", "indicator--aeab5b99-e9ca-47c3-aed6-80fd364ffad2", "indicator--f7d6568c-325c-4d89-98f1-7c221a49f92e", "indicator--fd835a88-fe45-40b2-a76f-9199f1f1062f", "indicator--8db10fb1-8abb-4562-bd35-198c85dd73ec", "indicator--66d1a657-7d10-4380-8b01-8d022cec26a4", "indicator--a45187a3-e546-4ca4-9884-c30f73fe09bc", "indicator--256e5e37-233e-433b-aad1-fc7cee1137bb", "indicator--82d4e827-d07a-4c7d-8ab6-a65b6f06a8f0", "indicator--356fd44c-5cbf-458d-a572-76d66924b011", "indicator--4807af03-d885-4c5d-821c-03ef156786f2", "indicator--8551b7d1-5c09-4d5b-85b9-426c16825df2", "indicator--8426f4a9-2cd7-48a3-8a3c-0050aac7e51f", "indicator--7f7debb6-0f10-4233-9bb8-cd3859473c98", "indicator--607b2789-5013-419c-83f3-a41e751a7ee6", "indicator--5a235787-03c8-4432-a44f-b2ddae4c8aa7", "indicator--04d0116e-c508-4486-bad5-ebbc4224e3af", "indicator--7a896805-a2ab-4d8b-9dbd-3e53096bdb1e", "indicator--6c5476c0-494f-43d8-9d09-26f6ec640a70", "indicator--ab09ca56-6414-43a6-9a76-3b29a135be12", "indicator--ba1a1881-9861-4198-8e3b-f30e9eedbc4d", "indicator--33188548-34ef-448b-bd4a-f7ee9fd24e77", "indicator--da51e59a-1b8a-458e-b21a-4938afe33037", "indicator--d9b68a3e-724c-45cc-a663-04e6684123f0", "indicator--6655b220-4c73-4d43-954c-59ee20c48696", "indicator--f714e318-5ffa-4bd5-b84e-cbf84b7a69bb", "indicator--8eb4856a-8411-412b-a3f7-69bb95156892", "indicator--2aee2ace-f7ef-4d50-9a8d-0f8abc15d56b", "indicator--8761a651-ba84-42bd-8670-d4417b048ef7", "indicator--8f21d168-28b2-4507-a427-8447b5c87661", "indicator--6698d59e-83f0-4e85-843f-c6070afa9cc0", "indicator--c2119fdb-50bd-4dfd-bdae-633c1b73aa75", "indicator--be714ee3-9e3d-45c2-b707-ecaa982c3395", "indicator--72cc004b-452e-47cd-884a-1397f046384f", "indicator--ade14119-6138-42f2-b49a-b74b80a95326", "indicator--5802efbc-6a5c-4ea3-9fb7-ccfb20c372e7", "indicator--3bca85ce-04f3-4d06-920b-d12af9fb099e", "indicator--ad65d352-70af-468e-9392-2b53cf569f14", "indicator--c349652a-9723-498a-ac37-921a9ce4c65b", "indicator--e499fa4d-7f15-4b94-915a-711ff0552dee", "indicator--e2721c6f-71c2-4aef-83da-513f2f49d222", "indicator--3e50ff79-1dde-4b5b-87fb-9a24bf0e24fa", "indicator--a51a142f-ec47-4da5-9e83-205b112d8740", "indicator--4bba08bb-8bdf-4082-b956-77cfc1029120", "indicator--47c2198c-9ea3-4532-902d-464f00a9f9ea", "indicator--2c0c3472-f6a7-4a02-a072-5e6af9ca40ff", "indicator--7e1c3726-6ab7-4d58-9b96-70f2080f6e50", "indicator--e07878ce-5ee9-4014-bc9a-1eed1c8352e1", "indicator--f40408d2-08db-45aa-a956-c69fbc000378", "indicator--0ed3b131-2b5a-448e-91d8-3b274593cba3", "indicator--de96e4e2-c9c5-4b52-9da1-d10390f87d36", "indicator--e4728e84-e5fc-49cb-a4e9-4906321cb755", "indicator--a772a433-60ac-4815-8aa6-93f62161e3fd", "indicator--0db99626-1100-4ff9-8bae-44404afeb615", "indicator--a39a1395-5650-4fa2-8b4e-1942bb639b4d", "indicator--38e5c096-db14-4369-b79c-b708c057c59a", "indicator--bc24d652-84f5-4978-be05-3408f9ef736e", "indicator--a7ad6fc9-3b86-41ec-a886-41e50d4eed10", "indicator--e3506f2d-6117-4058-aff8-d0c42720e521", "indicator--ad68405a-2d8f-49ac-a78a-d256d1bc6864", "indicator--e571d126-7a4e-4c48-b358-2863ceb30e1f", "indicator--f62fa637-3398-48ab-bde8-0a34a06bd18f", "indicator--99cd19ec-6f96-4a2f-8f43-2173ecc0cd79", "indicator--9e29361f-f5ac-4570-86d8-469684b2aec3", "indicator--c0076108-34db-4581-a0fb-903e304db5f0", "indicator--c09c0dc4-af01-4b5a-8a85-a359017a2997", "indicator--d357f512-0af6-46fa-8714-ef1d0a5e99c7", "indicator--e636e61a-d913-4cb9-98c7-3f9b039367c9", "indicator--b2485af1-4294-4b55-bdc9-8a2d2782ed36", "indicator--76d31118-451c-4a5a-b39b-97a8ee6d898e", "indicator--5faae27d-3ef5-456c-9201-7d2d501051ff", "indicator--ac44152a-2113-4668-9d88-9964e804d7b8", "indicator--a9542572-82ba-42ff-99b7-35f34ea32f69", "indicator--41e57ec1-2403-4d95-aaa7-287d4c23d4db", "indicator--63dea134-cf25-4674-a05b-667097e6d931", "indicator--be783ba1-175c-40d9-b86a-270dc3b39a03", "indicator--c598ca92-204b-401b-a0a5-215f1ef58510", "indicator--14738a1e-77e2-4427-afb8-acef54a3b6c1", "indicator--f6c5d966-2e57-4523-b69c-69361e752d5f", "indicator--fbb03405-4166-489d-a8e4-eb81e39495d4", "indicator--cc0721b8-53f7-428d-9311-ad62e573e259", "indicator--80172b6a-886b-4d4e-8c1c-d2a9c1462779", "indicator--b762719d-67f8-4d4a-84c2-42e2493f527c", "indicator--63fc6130-caac-4150-ac5a-0971e07cd174", "indicator--8493911e-6e7d-478c-9052-cb487258b6b6", "indicator--737babad-8221-437f-94a1-55352eb096be", "indicator--f5ca63e8-4efe-4b09-b873-d30da7d06d05", "indicator--79d97217-6ea2-4879-8108-1973a9a294fd", "indicator--2f9eb26f-045e-4143-aa1a-dabd1bbaa137", "indicator--cf868b4c-5975-439b-979b-cfe60187f41a", "indicator--67396211-f93b-4e15-bf53-9c7e52973735", "indicator--295f4b03-00fa-41c4-ab97-dbbc67782c3f", "indicator--30d8c2b1-6b9f-4325-ad80-e4d57094767f", "indicator--bca21724-17ef-4ccd-bae4-027d85e2ba5c", "indicator--6d47d1b0-9d69-464d-976e-f8edee40acca", "indicator--e3f6f6e2-30e1-4dbe-afb1-a95285769164", "indicator--ed7281ab-3441-470e-999d-181500327b01", "indicator--eb462aa5-c711-4be1-9ee4-64c8d8535cd1", "indicator--d2b8fb1b-ab28-409e-89ad-70fad8f9daf3", "indicator--a4ec651d-9da9-4f02-90fc-cf8c81446da7", "indicator--89b0668c-6c6d-4c33-a992-863a991b528f", "indicator--8add7e68-4412-4176-a04c-6c01374e7503", "indicator--fbda0c7e-a170-4b3d-8ed3-2b8825e804e5", "indicator--c9645b0a-b601-47b6-9597-497f636fd6d0", "indicator--07b44d63-9f7d-4651-8464-1074fd9dee26", "indicator--74010349-0b28-4930-b9a4-9045a4daea0e", "indicator--414a48bd-d1b5-4227-bdf1-ac65a683d64f", "indicator--7a92048b-84a7-4856-bdf2-d8e30d137bc2", "indicator--1da14428-5f6d-4533-a84f-f73f1b3e8885", "indicator--34712c1c-7842-49c1-ba73-0bf7ce9747f3", "indicator--dc4eab17-4cdb-49cb-9660-22bbc101f684", "indicator--db1593c5-b4a9-4f85-8592-2013395dd51c", "indicator--fc08718d-97de-402b-862b-38b05249e1b0", "indicator--2e4dff61-3efa-446f-8126-b64b6c842b50", "indicator--3737c690-0250-46e5-bc1d-6a1aa7ee9edf", "indicator--af42a3ba-4451-40e5-a95c-ae71bebc008d", "indicator--db9771e6-ca8f-444e-9e4e-a1982f08765a", "indicator--d2345d4b-54cc-49f8-b6f6-1a55afe2983a", "indicator--809a1eb8-559d-4321-97e1-9c2f4d4e1f3e", "indicator--ec73bf13-d4b5-41ae-a345-f7a176496109", "indicator--dcf65ce3-ab1a-419e-bb5b-a9c5c28a379a", "indicator--1e80aab4-45c7-4baa-b283-6ff8861e5ec4", "indicator--ffb7c621-dc59-4b01-9a13-39731989b65f", "indicator--9d71869c-622c-4636-b3d0-f30fbe243108", "indicator--2b82e48d-b38e-4450-b28e-80f4bd34e0be", "indicator--f3aded36-e183-4a02-b336-a9343e7ee2ed", "indicator--e9f740dd-00bc-4a2b-b9c5-8d0b3f7d8b29", "indicator--ba61ca6e-7386-4378-b7dc-7fb5b6e5a065", "indicator--c5653b5b-aa2b-470b-bff9-6019626aee16", "indicator--c3130f0e-fb22-4f1a-ad2e-619ddbc705ad", "indicator--e54e6c95-e115-4216-ae10-646cf57eebf8", "indicator--6500d278-0193-4587-865c-aa2b5d185855", "indicator--429e7317-60ac-4254-9351-183c1b4e264a", "indicator--e715b2eb-bc84-45a2-b9f8-c23ef130d94d", "indicator--f1b7593a-8656-4975-bca2-bc7b05b956b6", "indicator--9f938c24-8759-483c-9f2e-ed17b12dc9ee", "indicator--c349de8d-0577-4bf6-88b8-cd9bf7459fdd", "indicator--8ca7684a-20a0-46bf-a0f6-99be60559f2c", "indicator--96ffaed6-9d61-4f85-909f-535c2972d5cf", "indicator--ea4a7831-768d-423d-877d-5c1c35a483bc", "indicator--db9ca499-588e-498b-805a-383804df1552", "indicator--e68c2cee-7592-4130-a258-e244e3f5f21e", "indicator--4f5a0e98-5ce2-4215-8fa7-85c209ad59bb", "indicator--93a73b61-21a1-4278-a4fe-3cce71b2d3b7", "indicator--d82aa620-fece-4668-908a-5fbf63cc1b38", "indicator--8f10389c-652d-4a4b-a624-3cd9c156919b", "indicator--002d1d60-d5ad-4318-be57-b5c8b4b34ba5", "indicator--a4e04119-aeaa-463e-9cef-76498a8d7782", "indicator--8ed03209-3b62-4f9a-8a6b-dc7580668778", "indicator--7ecf3034-17b3-4672-8b87-a8304065ee7e", "indicator--52e6a600-4275-4e1b-9c0c-793ced4cac6a", "indicator--10bdf39f-3906-4221-8cb8-482f707d3953", "indicator--20cf3232-6a7c-46fa-b8e1-1c33719fe1f7", "indicator--a7ccf2af-fdf0-4f30-8fa4-329d6b25db85", "indicator--96e3eea2-0285-48b2-8a74-e630edee6b93", "indicator--2f3765eb-aa04-42e0-a8b4-b6c8dfa9b957", "indicator--03fbf601-f2aa-4623-80a8-3455545fd1bb", "indicator--6dcbece8-3077-45a8-b390-ff6f6444b716", "indicator--1a6509dd-3003-4f8c-b176-2ebc0ddde006", "indicator--961855ed-2316-4cb6-abf8-ae6bb6a52775", "indicator--f001cf34-0b9c-4520-86e3-a19e4f66e935", "indicator--adaa66ed-c5b6-4146-ab6e-db7b6e1b7192", "indicator--c09f8521-515f-46af-8df4-3bc97a4341d6", "indicator--26fcc9e3-eb9e-4426-91af-8f19e6f033f3", "indicator--120d1363-4f26-40fe-b38c-563cce172ad7", "indicator--2838c2c1-3c62-4a74-aede-bce31fd42187", "indicator--1a0a2056-fa15-4120-a732-a5e239d1bf85", "indicator--c46357dc-75d6-4813-858f-26bf26390edf", "indicator--f0e138d1-5cb2-4f47-9271-4aec132c7030", "indicator--f71d9445-b18a-4037-b34c-6014e5a007c7", "indicator--fa8a3ecb-200c-490f-a3ef-9e2dcd5a396c", "indicator--577d64ac-7430-4b7f-a29d-70bd75185175", "indicator--f25d6d2d-ca72-4f4f-be55-e2e81d69ef96", "indicator--40fdf28f-0ac5-4579-a3b4-6e4a56f77684", "indicator--0bd2690a-2065-4d91-aa02-68118798272e", "indicator--63f1f358-bde2-4681-ac63-082d1bb0c5f5", "indicator--2576af21-7d7f-48ff-b27a-694ffe0a33c0", "indicator--1539122c-6e0b-44bd-806f-b40660e12975", "indicator--a8f48e70-59af-4c71-83e6-3cd191b1604f", "indicator--88dff3f3-da6f-4959-b631-aeb94442eaa9", "indicator--eb0d8e3e-a528-4711-b7be-ccf8816561f9", "indicator--e171d02d-96c0-4d98-8bc5-218605253ed8", "indicator--92715425-ce04-4414-854c-c31ebc4acc54", "indicator--2409e73e-4152-466a-99e4-927275885280", "indicator--bae53f11-ed0f-4090-87a6-cf0eaabaf59b", "indicator--b01181e1-7c7a-4bcd-84a9-f025b3623de3", "indicator--7fb9f9c0-503d-4f43-b388-33c3ec922457", "indicator--7e96188d-ee99-44b4-bfba-76fdb01cf025", "indicator--033cc09b-3024-40e8-b144-26d8687d7693", "indicator--fbd7aacf-94c8-4b50-800d-f7927f9db3bb", "indicator--92c26426-4f9b-4547-a208-8009a5434dc0", "indicator--ff7b72e5-3026-499e-890d-b86c3f8937cd", "indicator--2a8a25f6-c160-4ada-ab69-c59dd5c3a6b1", "indicator--7f434298-6012-43d8-96e7-798275b3f9d4", "indicator--a3aab40d-df39-46a9-bc36-5ca948415c64", "indicator--04ea40a8-e437-43d5-858d-3c395f3a2bd9", "indicator--0e9be9ff-5fb5-422f-b734-2367396ad3ab", "indicator--3de5e76e-0cda-4942-9c39-043b4e1db536", "indicator--a6a2d6fb-bac1-48ad-b155-0a74bece7852", "indicator--5ba860d6-f6f2-4d0c-ada9-74d65a677889", "indicator--f329a749-0068-40e9-ac9e-011954402ac4", "indicator--3b32ce75-6b8e-4ba2-80de-aa18606eb64d", "indicator--08a8d647-c109-44e3-885d-b6cc8c1be31b", "indicator--6886c2b1-0828-4a68-9cc5-38dd687bf93d", "indicator--c6b1665b-b907-44f2-a428-2e8a09826e47", "indicator--5e6b5f4c-b306-4c5a-bef3-905e3afa7326", "indicator--74f26a0b-8b58-4cf2-9bc0-53e9121f3db0", "indicator--01d59390-7b26-4c43-8dd8-ed0343328eca", "indicator--be8d06f9-6015-42a6-8c34-52c49bb490fb", "indicator--ef225337-6280-4f2f-8c76-20ffc21a52ea", "indicator--fc6c6d8f-55de-4950-97d7-e410854e5eee", "indicator--5b42ab63-d3a9-41f2-b2f6-36d8698848c9", "indicator--d68e2267-b60b-4add-af2a-e393838daea9", "indicator--d3cfd2ef-0bcc-40bf-a3c1-eca327002416", "indicator--31cb752a-8389-437b-8a07-56c032e39cea", "indicator--09f91f89-ad09-42fb-8f93-f6ad80580da5", "indicator--2ecf0386-62ed-4449-8f9e-e5968ad68b56", "indicator--557111cc-9a13-4032-a297-506cc27d96fa", "indicator--0fcf679e-373b-4a72-9074-b8dd2e2be06f", "indicator--831927b8-d1d2-4f98-8db5-aada377e1f27", "indicator--4ce04a51-cf85-43ed-aaf1-27c176d2ef6c", "indicator--9680425b-25ec-4e8f-b4b7-a8d127d5bb99", "indicator--10ef9f29-01db-4441-8da1-ceba42fd37f1", "indicator--350b12f7-7282-49cb-b0f7-5b1a896bbe52", "indicator--20e7cafa-f81b-4ea5-9148-df31b8cc9081", "indicator--ceb61ca5-0868-45d2-9722-1b572a056d8e", "indicator--8498cd0b-cd4e-4411-8829-823186092d75", "indicator--6da79af8-0f26-4eb1-9959-0df7e06f1280", "indicator--917cc090-28d0-4a62-9dac-77defd527e3e", "indicator--e18b60f0-831d-4a64-bc60-7249479a7cd9", "indicator--547cd502-a808-4448-b5bf-923486c5f455", "indicator--250b16f0-6f10-4ec4-80ec-4682bd9848d1", "indicator--1715d89f-80ab-459c-8c33-81fd006359da", "indicator--0ef25d97-75c1-49f9-822a-7c369b0aa80e", "indicator--31032687-1965-4e9f-9a02-69e165292d90", "indicator--d1ed6275-506e-4fda-8adf-58ab415e446a", "indicator--23ae4d3c-3409-4243-b946-6f1506543a54", "indicator--ad22a120-7cdb-405d-bc5b-8c605624d7e1", "indicator--ba1216cb-4245-42bd-8502-4aa566032037", "indicator--cdfbd89f-1c16-42c1-9ae7-2f124809b3d2", "indicator--4870f864-3401-49dc-9213-948e814fb5ef", "indicator--31234f18-bef4-47d0-af4a-a387c023261d", "indicator--27254d85-4a3e-4b8c-8de3-fd19b0f85103", "indicator--b863218c-40c3-4f68-9c0f-660717a5e715", "indicator--056bf9a7-4b2e-401e-9c9a-820da86de292", "indicator--87fc73eb-fca8-4ce9-9841-ac566eecb569", "indicator--238bc936-1137-44b9-8606-7bb7a26d3150", "indicator--d27dd944-f5f7-4268-ac31-fc82bc45ca72", "indicator--53f7a470-b741-4953-bc59-d56f64ebbbb0", "indicator--4217ce8f-9b7e-4e3a-98ec-6c7daed775e3", "indicator--4f08a4ee-f2cc-4f5b-a581-e3ed55b9e625", "indicator--4ca96b7d-be2d-4058-9183-abf543dc1231", "indicator--c1ff658e-5462-4df5-8276-d2155389c334", "indicator--03d2dbc0-4f9a-403e-a366-e4aea7165f0b", "indicator--4ed0b0cb-4cfa-4748-9898-658aba20e3e8", "indicator--a63230aa-a367-4686-92c3-be2ec5d15745", "indicator--f8d799cb-d8ad-44da-97d6-01f1890f44ff", "indicator--63b63346-2442-4077-9bb2-45e8eab3311d", "indicator--c3af5058-fe99-46c9-87ff-f1728bf7abfe", "indicator--c8e4a968-6066-46d6-bc34-4ba06b6090b5", "indicator--11e94275-2046-46a9-b763-111ff6b6d468", "indicator--757cf13c-bb8f-40d9-b434-e7361344f2f0", "indicator--742891e8-4df8-473f-bf0b-9a2c852569fe", "indicator--3ff6b91c-1677-4d10-8eb0-2d8d637b4c55", "indicator--77f68fbb-9f73-4ea0-b7d8-647b45dc535a", "indicator--add83020-c913-4066-97cd-6c34062d1334", "indicator--92554af1-4013-44dc-a9d6-432f7767dc1f", "indicator--e596b927-9cd4-4ef4-81eb-ac0c9fcd904a", "indicator--54dd4b36-eff2-48b4-831c-14fc47e4e81a", "indicator--7247a694-3c90-42c0-8fb2-2a44e84a2aa2", "indicator--a583d59a-95db-402d-9793-eeb71257230e", "indicator--25d1cb19-caf3-4b0b-83ed-8924d1bb7eb2", "indicator--92ed6030-02c1-4794-a1b3-1f96b16eb8b3", "indicator--f5450a1a-81b2-4115-b08e-91cbd7ea5574", "indicator--6615714c-29f9-4214-bcee-a28d5e6e36d9", "indicator--205b3396-45f7-4599-8a28-9cab16d9ed2c", "indicator--d077ad5d-5a7a-4ad3-b825-f5be7b3bee0f", "indicator--87aa3f9a-be9a-4a49-ae90-f586157bfaad", "indicator--e06ff0ab-648e-48ac-951c-ae2eb1820805", "indicator--3e28e41b-a6f8-4e5f-9424-c404b620b6b8", "indicator--7c0ba340-443d-4e2d-a6b6-eef8186e63e7", "indicator--107ac0fb-d809-4540-9687-df3db123b818", "indicator--9407b400-24e1-4746-b441-05205074f265", "indicator--58ddd50b-e34f-4b83-8c60-c0be776e2cb3", "indicator--752301f4-98e5-46c5-b2c3-085170faa5d0", "indicator--342d75b6-81c4-4186-8cbb-013741db9b07", "indicator--c61794e2-cc4b-496f-8ee6-3a4bba6ba84f", "indicator--c80e3f83-a5c7-4b33-8f09-c355279d56c2", "indicator--599b9db8-0093-425c-b30f-48d4e5df52f7", "indicator--835eb628-ac06-4feb-a7f0-b9922ea1d458", "indicator--e9a80b40-106e-4570-a795-62b5cb51eb70", "indicator--cec317c2-9df2-43f0-8640-54087eecdbb4", "indicator--255bec97-01a5-488b-84b3-75eefa3aebf4", "indicator--c7565b46-43fb-469d-b35f-982fe63c3c96", "indicator--ecc3cb94-6c77-4a18-8142-bba4aaf5b6ae", "indicator--9040832d-83e7-4453-8b47-0f4d03373bf8", "indicator--dd313f45-2dbe-4bfd-ad23-de804aaed6a3", "indicator--3658304d-cbbc-4f98-aee9-94fa0a2c93b6", "indicator--938a7613-ed8d-4441-b7c7-8f3a50e3d81f", "indicator--b6bb6dd2-82d2-45ec-83a0-2759b810cfbb", "indicator--c9433e6f-8d0b-4f46-ba99-3fe42862a0b2", "indicator--21855e9e-513f-43ef-9151-082d3bfc45d2", "indicator--10622756-d524-4813-857f-5e0cdd067820", "indicator--23111d26-8c34-467c-8a77-a1461dc274b7", "indicator--adb13645-7468-498a-aa6f-a3d1fc706c8f", "indicator--d1e05041-5428-4907-ac3c-0997a45a4774", "indicator--13e37be4-8d91-4dff-8381-9ec50eba70e9", "indicator--d2606850-e1e0-47f5-aa17-82d86bf0ae5a", "indicator--024ce696-901d-4b1a-9b65-c5babb25cd9e", "indicator--18a97cd3-f51c-409c-ba85-cc21106a942e", "indicator--f589f103-e957-4326-abcb-5cbbd15b0b65", "indicator--711013c0-ba7e-411c-9ff6-46041448de65", "indicator--fa21dc7e-1457-44cc-be21-4de8c716893a", "indicator--9c56402a-9b2e-4cb5-9d59-d86872563801", "indicator--bc21c0cf-43fd-4423-9163-efd74ecff9b1", "indicator--9eb77065-3de6-4105-995f-ae86e33dd920", "indicator--babf2fdf-1696-4969-b13b-2e84cbfee91b", "indicator--0f8f1322-c053-4ab4-9773-fc9338a1f8d8", "indicator--96382edb-cbab-4b16-ab62-d4254b373507", "indicator--b47f92a8-16a9-4941-8384-16dfc17b9dcd", "indicator--b4e0f73d-1ca4-4856-8286-b49413949693", "indicator--79c364af-89fd-436f-8feb-d3a696e2ab8e", "indicator--774d7c3d-eea8-4167-8506-0c01940b888a", "indicator--be0e79b3-0e6c-4c3a-990f-20c535289e2a", "indicator--4c853437-cb7f-46f5-85e1-29fb645c656c", "indicator--fa56da59-a239-4158-9dfb-243f2706c084", "indicator--4e78b01b-7481-4d81-bb94-758a22c3be13", "indicator--bb70e9d4-4ae3-4bfd-8972-1a01cea6df23", "indicator--71bda82c-2c7a-4c28-8798-9b58f40c1083", "indicator--de58d122-1df5-467d-b3f3-10fdb444e328", "indicator--688080ee-411a-4053-af75-9a9a376fb947", "indicator--25baf5d7-d558-4f3d-aabd-6b83176eec65", "indicator--e47617f0-f5fe-4243-80c8-1796a7b18978", "indicator--9fd17af8-e22a-49ae-ae06-dee85337da48", "indicator--897bb0ff-e3f1-41d8-84f0-05952c6e888f", "indicator--0b13e6ae-91df-46f2-8e64-d3f856804583", "indicator--4884de17-25c4-4252-82ce-e9ed54d258d8", "indicator--54fa4b7c-ae20-40c4-8b97-64c7176baf61", "indicator--c414e866-ab05-4ef8-b7de-6100503a1635", "indicator--8816d6d6-e5ce-4aec-ac16-ae73f9ddba87", "indicator--dcd89bbc-a118-4d25-9df0-1193faf576b2", "indicator--affc35a1-f2ce-452d-bcfc-5b85b1fa9bfc", "indicator--00c60cc6-4cb4-4c02-a11a-c35b1abd57f4", "indicator--425b8384-2593-490c-93d4-11af669c49f6", "indicator--6d5535d0-412e-46af-8014-75ca9c042d85", "indicator--33a5177f-b149-4a7f-a651-d4c4db0dcf02", "indicator--0efaa3a4-54be-45b1-8f11-038a9d9a10a8", "indicator--8a05fd28-0c0d-405e-b9e9-2129583a456f", "indicator--dfe68017-b03c-45ab-9271-038c2ee71b57", "indicator--e9edccf9-454a-4850-b4e6-a8c0d9ec37c6", "indicator--f0a0c04c-f8d1-4927-9c16-06adf2aa0af2", "indicator--db08a446-5031-4c86-9f8f-70dc366a9244", "indicator--62f8a9fb-a97f-460e-9a12-e990a4d41b6d", "indicator--16a7713c-5a89-4338-9712-ccf4fcdb0bcc", "indicator--be13a59e-e104-426f-b26d-e02c9ef1e179", "indicator--24777947-f1a7-4925-a029-3bcd9142468e", "indicator--00f151ad-0050-4e78-ae4f-46ab0996c903", "indicator--2a6881d4-723d-4359-b679-18f384f13287", "indicator--30dada15-c7a5-4dda-af18-cd5dcdd5bf78", "indicator--72e29afa-ce98-4b36-b3a7-72b8f067cbf7", "indicator--4887b643-b445-4e0b-9686-d9e36394f708", "indicator--70e503fc-88cf-4503-8a74-798df4761b92", "indicator--da8cc407-0017-4569-a120-55bb121ef0dc", "indicator--85e77dcf-c30b-4928-aa26-3bbd20dec025", "indicator--81006fb0-033b-4f5e-97ad-312fe48010cd", "indicator--b788d459-132b-429a-89e6-b13c66e48c31", "indicator--8f628e94-3d4c-43e0-b53c-e421dd4f4ba1", "indicator--ac9c89da-d426-4451-98b4-a63b152ddcff", "indicator--cdbd6cd6-487d-4cc1-aefa-140e8d1a7b36", "indicator--45ef0067-9e7e-44cd-9144-86c17c9a8d58", "indicator--38a01aac-c1ff-4b75-9300-eaf2bd15d731", "indicator--427b26bb-0364-4910-86ea-8a9a3b27cfb4", "indicator--03bbe58c-2e85-460d-a66f-93fff7058e66", "indicator--dbca0fcb-6008-48eb-bd63-ad697ec53ea5", "indicator--391113c8-9e0d-4476-b037-5c6b49075eea", "indicator--ac052d92-9788-4e57-9b5b-c8023854ddb0", "indicator--1bcabc1c-487f-45eb-b3e9-77ac8b7498c1", "indicator--452d8d69-b5a2-404c-9323-0ad72aaa4806", "indicator--6d60b306-6652-411d-b8b0-1915de912c27", "indicator--8dc4b06a-fa96-4691-a95a-fbb50efbcde2", "indicator--ba59ffb4-65cc-4c3d-a14b-1c012f384603", "indicator--9a533d18-5943-423d-9b4b-4ff12d9374bd", "indicator--14382912-43ea-447d-ae53-bd5eeea2168e", "indicator--b6086292-03cb-42b0-a039-21d5ecafc48e", "indicator--b3f6d186-c89d-4847-a00d-3bb7927ca3db", "indicator--adbc6fa8-5558-4a1d-8164-465d42beafd0", "indicator--4f2f9e68-847e-4b23-afb1-c83a1484e493", "indicator--8024be39-d547-4a69-87d6-70cc0596e0c3", "indicator--d51f171c-a2fb-460a-9b5a-dac54e85ba02", "indicator--6caf0360-936d-4aed-b218-fa8cbe7dd65f", "indicator--9922df3f-e720-419e-92c7-3457faba0e1f", "indicator--8dbeade9-3953-4364-8f2b-2c72b449e59e", "indicator--582d783a-333a-419b-a415-dd84db489081", "indicator--6925a67c-32fe-49da-8e25-4140ceef20f1", "indicator--e1b77841-908f-4a01-8384-4aa331e2228f", "indicator--51d60b38-e455-4e23-a1d3-7fe6b9599b09", "indicator--ffb279d0-3aed-4aec-98f6-3acf09a27beb", "indicator--6a59388f-af38-4fc2-84da-0c81cee31b70", "indicator--8aef08c7-4e20-4bef-89c6-db1206907eb1", "indicator--232b36fe-3335-43d7-ae92-61e3af2a6b57", "indicator--cbe155df-f0ad-4bc5-b5fc-ee7827961bcf", "indicator--d76ba9ce-d45b-4369-8037-3158335b6f48", "indicator--096f4b39-2671-4f3e-b585-fa0229439921", "indicator--596dee35-456d-4a00-b3ca-2195e6411dab", "indicator--66a117df-5fb8-4afe-80e0-77106553f870", "indicator--193c6286-e5ff-4b6a-a3e6-bcccfeded36d", "indicator--9fe5512d-d27e-4ffe-ba5d-d9d8a6f37d5c", "indicator--deda3810-d466-4861-b489-61266625ab4c", "indicator--f49d819e-06d0-4785-b648-58e21d1599c0", "indicator--0ba373ce-56cd-4369-8e45-46b32bc2d54f", "indicator--7d650903-3ad7-44c4-925d-58f736f89652", "indicator--27774c08-e566-45b0-bd69-d8b9d92ce960", "indicator--9882c7e9-8e5a-4941-bd50-c5abc2b3dc43", "indicator--48e6f5b6-ab24-4e89-b3a2-ed4250ccf459", "indicator--67144672-771e-489b-bb4e-cea9222e903b", "indicator--ba2ea270-f9f0-4368-aa97-3031d36f8e68", "indicator--057d3d3a-2a15-4fc0-89b4-71b34a75dc27", "indicator--8ca8ccc0-0a0a-436d-84b0-c5a9135fa94a", "indicator--11134fa8-9db9-406e-9c7e-eb7419c57d0f", "indicator--f02ba7c9-5c36-497d-a0e5-f2bcbad3a151", "indicator--2017edb4-f598-491f-88c9-509fb834a95a", "indicator--3b699d0c-e989-4a06-afc0-f5b7fda9a383", "indicator--3bf8b014-b873-4f41-bff1-32bb237a62c1", "indicator--81dce74b-bd53-4e20-864c-67d8670cc29e", "indicator--77bc5ded-e85b-4c2e-8a00-2a7a679e9645", "indicator--6d10ee6a-4138-44ff-8640-ad5ae44dba3d", "indicator--f137e91c-ad2c-4f83-ab2d-d60f79f3a7e3", "indicator--6b01c40e-1afe-465d-b53d-7c592eba1092", "indicator--a69e3be5-5248-4a41-8a2d-516ccfaeeeb2", "indicator--009188ea-b3b3-4665-8eaa-0be7a5cf872a", "indicator--8d3c621f-d981-4d45-82c6-28682da712c4", "indicator--c0a09375-5d78-4f99-8b81-4910c84bc50c", "indicator--fc694543-7f49-4e65-8e81-97401324273e", "indicator--8a0215a6-fe6c-4310-8430-443a5f224f35", "indicator--e48d9d47-1213-4fdf-b16b-aecd7d91f797", "indicator--fe5120da-c4ee-4a0d-8609-3fa854c89da7", "indicator--1c2cf08b-3f93-4b61-83cb-6509fd8eccbb", "indicator--7858adfc-f526-4526-acf3-b0b749c7b616", "indicator--a2035c74-18f9-41f9-af8f-f090e0fe3236", "indicator--13c330e7-8341-4e5c-8d69-a246d8ce2597", "indicator--7b9c74ee-12dd-4f0b-b375-717b3514868e", "indicator--085079e4-60dc-4a59-ae49-af8f9d933e47", "indicator--09716bfa-f4f4-409f-ac9e-8d9d4fe8989c", "indicator--c3cf083d-14fd-453f-bdff-7d7c5a048465", "indicator--e2686d06-7124-4671-ac02-c4c479409488", "indicator--519f2def-d144-4cea-a08d-db9f61ec94ed", "indicator--99ded05a-fc3e-492b-a96d-b907d62019cc", "indicator--56cb0d3e-01ee-46a5-b986-8485c4875c0e", "indicator--1beea0fe-49e1-458c-bac3-ad1e3c09adeb", "indicator--5608b346-3af8-41fe-8354-cb3cb13a1336", "indicator--4bc07efa-965a-48a1-9e28-7154de647914", "indicator--fba51a92-8c95-48f4-adbb-1dba2c2baf8b", "indicator--9d7e19f2-c95e-4658-bd6a-0d482d637acc", "indicator--08b66a94-d23d-45ed-ad6f-a61765912852", "indicator--79d0e529-e435-4933-8c27-01c60b71f9eb", "indicator--6f85f067-3750-4fe4-aa23-d060cfbe5c75", "indicator--7ac41efd-de81-4f66-afa4-f1b25a6bfa81", "indicator--120289ba-acc7-4820-a7c7-94f5c519e65a", "indicator--6d86f512-92ea-4e7f-9085-ed2b55996348", "indicator--99151679-112f-4896-94fc-84c03a8379fc", "indicator--4a7c9f85-3f38-4b8d-81a5-48955b4a8f93", "indicator--749684ed-5b02-4242-867d-48a778ac3596", "indicator--fb4aee89-a4a0-40be-bd2a-f933fccfec4f", "indicator--39076caf-36ec-475c-a755-d5d6c9addb7d", "indicator--ad389412-7030-4890-b582-3d97d73a1a14", "indicator--427d8839-a828-4a82-a289-044894cb9b63", "indicator--4a43321d-9d4a-4647-8060-c9e2010cd496", "indicator--7f6f015e-d1db-462d-837f-32040bf3177f", "indicator--d755eebe-7838-46f7-a660-9dad6a06cc84", "indicator--04566307-6e85-4161-b079-1ba51ab178ad", "indicator--4d192a04-56e1-46e0-83dc-cd2155c3b750", "indicator--85aaa635-62d2-4900-9f5d-5e81cead3e88", "indicator--babbc9bb-1a8a-417b-aca5-7eb142dc0f5f", "indicator--13159dd0-d3b4-46cf-804d-479281f7899f", "indicator--6899ac3c-b2ce-4f53-acdc-a66d8a369ac4", "indicator--ecca35f0-2a22-47de-a15f-18f0d034021d", "indicator--ceb9cfcf-4103-43a8-aa77-7b7830a49d5e", "indicator--d18e2019-c285-4e26-8318-fa23229b17e0", "indicator--010d5392-b3cf-4d42-aad6-23a9d0ef32f9", "indicator--9587e3d2-bdd2-4900-bc53-79e60c01896d", "indicator--c2cefad7-f099-4b7d-aa17-8fabdf0f6515", "indicator--3e08f766-7e07-4ddf-898d-3c735be1b08a", "indicator--e9f33478-0c36-43fd-b1be-7f20919a5159", "indicator--0cbfbe4c-c747-4965-ae48-9e54e05660e6", "indicator--b6c36aa7-55a1-46aa-a015-7aae8a6c140e", "indicator--012cb7b0-f2e8-4603-ac25-dacbc114ec44", "indicator--218aa489-827a-456f-a311-913dfbb87736", "indicator--bb71a375-40a1-4f6e-af83-cfae58850f33", "indicator--55c16585-80e9-4252-86bd-e32a476d89c9", "indicator--77c79604-d35f-4b0d-b076-8fd965537adb", "indicator--ba68c51d-7f5c-47db-afd3-0a3ce9adf881", "indicator--0feae2c3-f05c-413b-8434-d984833ea6c4", "indicator--83ad300b-aae3-420a-9b39-a1f9b083e035", "indicator--d9e6f4f1-3293-4d08-9b35-92e391699470", "indicator--27604add-a2a0-44fa-8993-ec062c973f8b", "indicator--23b17d39-e2b9-4912-a090-92192ae931f7", "indicator--16248b92-bbc2-490b-9329-c6f49bb3d853", "indicator--9714f274-e66f-4c19-a11d-b25d02e2405e", "indicator--eb26761a-e83d-4c77-b016-2f4547e9113a", "indicator--46231a2e-6bd4-433c-8296-2150116e2e02", "indicator--fe70d50a-5efb-480d-8ce3-57ec4b34f132", "indicator--d9e02920-cf5f-469f-804c-c0ccc1c805f8", "indicator--0ad1c4cb-7e56-4846-aa83-5edc082f2db8", "indicator--aa180270-b1da-421b-a825-b6861dfda5a3", "indicator--646d20a5-9605-4223-84e4-329dd5c1369f", "indicator--40723ef7-496d-41b1-bfc8-700190ec3abf", "indicator--abba72a7-071c-40f4-b224-041013851b3e", "indicator--cc0dc748-b26d-467d-9915-c37496f8e9c2", "indicator--6bf1fa3e-e4fc-4045-8147-4c3aea413698", "indicator--8992e776-169a-45c5-a8db-69675b4b3750", "indicator--0880105b-fb6d-4821-80d7-5de48ed7e2e0", "indicator--64aa3284-6686-40a2-a825-a22366f5c4ef", "indicator--36397dba-3ba1-4e7b-834b-678a5837a85c", "indicator--4f17b37e-2412-47ef-bf2d-9ba8e775952b", "indicator--bcbecc02-dacc-402e-97d1-7fdd5af01771", "indicator--04aa6549-7fab-4779-94d5-1ef25c5b8f98", "indicator--25658617-a6ef-410d-b63f-274440f45779", "indicator--a673a155-1a6f-41f1-93c3-d8982bb012e5", "indicator--7f26b5f9-5db4-43cc-8622-d6f832d971cc", "indicator--4ba59f0c-ffd4-42c2-bed8-322f2059bdc6", "indicator--f22e63f9-06cc-4a59-84af-e3d8cccad46e", "indicator--41f6b114-1ecb-48f0-b077-70d412f8f255", "indicator--c8df943d-9e16-4215-b899-8e495eb6c0b0", "indicator--848ce1fd-b23b-4a30-b9b1-94ecbb875b4b", "indicator--bd2b437a-2b3c-4f15-b350-bd2e2be9abc1", "indicator--92372169-d69e-435a-9e82-6f001ed0af05", "indicator--06eb44f2-5ab8-4db4-82a1-d4c69236a2d2", "indicator--5aeaf044-447e-427f-a51f-ad61e09166c3", "indicator--84fe6c7b-55cb-435c-bd0d-7018f7354c8a", "indicator--57234eb5-af7b-4985-b9ac-5383cc37e3aa", "indicator--4f3608d4-0b19-4e05-860a-bd957cb4ea1b", "indicator--604de8b3-7e6e-431c-87b4-cf4e2bc3659f", "indicator--b980c7b9-cedb-4156-9da7-65f682dab202", "indicator--aaa42f1f-071c-4395-8e74-b96ff70787bb", "indicator--0238f46b-bc66-44a3-9250-941cc35065d2", "indicator--5fe85db1-2271-42dd-80a2-31c2e40e6367", "indicator--b8282131-c85a-4368-b415-b6d1c4315723", "indicator--e9f5d2e9-26aa-4794-92e4-e2379232cbd3", "indicator--bb441e7e-9d6c-4e59-8f9b-794dda1be152", "indicator--75d81bfa-3a4d-4eed-9f17-870f2c23885a", "indicator--309b01e6-a2e5-47c8-855e-01f90f573823", "indicator--95a31eee-b2bc-4b63-8f8d-22faf1b4a4b3", "indicator--d2328806-b75b-47cb-8c29-33b513c7e257", "indicator--1d726651-8cda-43d6-984b-e525a49fd417", "indicator--911f3cf5-6061-401e-a751-28b001a9ef06", "indicator--b9f1f8f0-c98b-4a4a-b1fd-bb2e247950c0", "indicator--c651616d-8ac0-4de8-beec-e638e76ef0a7", "indicator--cca82018-6ceb-497c-91d5-c84198a045c3", "indicator--c054673b-abd5-4310-af7a-ca8f06e2d4fd", "indicator--c1d80adb-e5c3-452d-a472-3cbfe4f8ccbc", "indicator--50d4ba04-6063-4363-bb32-90b72abfae17", "indicator--b9934200-54a5-435c-9dcd-4a4880132f50", "indicator--aa612003-2076-43f3-bd16-3875a2968f2f", "indicator--56cc6784-16f9-4d38-a229-f5b7699ae900", "indicator--41c18440-60a0-4c69-9089-a6fffa54e194", "indicator--490432ef-fbaa-4970-9c47-56d5959157da", "indicator--23b750da-c94a-4bf5-95b8-e1c9e746020c", "indicator--e3912647-930c-4b57-97b2-f6b1166405fd", "indicator--45e7ab35-e690-40a3-87b7-f8ad10da9b75", "indicator--d4a2a7b0-5379-4109-b238-84a0e372ff6a", "indicator--31a8b453-b25f-4461-9c79-64af76d60e2a", "indicator--c18b0d8d-befc-4ef0-8224-26adc1f3cc01", "indicator--6fbff630-0ad1-416e-aa1d-562e30248976", "indicator--4046f980-b351-4be2-a5a5-6e228c26b93d", "indicator--17c470b5-4751-49ed-ac61-485e38020952", "indicator--de3523f7-70d7-4c5c-b431-c6e5753871b4", "indicator--c2f65c2d-a9b1-43bb-a990-cda0b2fc3bcd", "indicator--8373560b-bcc6-4918-94a9-3c7df2a5fcd6", "indicator--100ef1cd-6bd9-4046-b624-53b833f282dc", "indicator--73c2b50e-8075-4a7a-a443-936577080439", "indicator--906e7075-3fc1-4288-894b-4ba84a9e984d", "indicator--532ceff2-f7ba-481c-afad-b76bfd61ab64", "indicator--f810600c-8582-4606-823e-07104f16133a", "indicator--93e0b231-2d06-45ba-af02-2378e08346a5", "indicator--cb1e5641-d468-4550-8027-a1fafbacc903", "indicator--6f195322-c99d-4e61-a6ee-0c5bbcbead1e", "indicator--45b0dbe3-82c2-4b1e-b322-24c5109450cf", "indicator--59cbc70c-8380-4783-aea6-52907f065c67", "indicator--3b8ffbb2-1058-4d5e-b58a-310df816dc05", "indicator--cecf86f5-fa35-4e01-8545-468c12796c72", "indicator--9f14f5da-f275-4287-b139-3d9bd58cd5a4", "indicator--99bbbea1-5371-4e24-a40f-f0654515ba1d", "indicator--0b058562-bbc0-4789-9b6f-c05a50e8384d", "indicator--9301cae5-aa5d-479a-9b99-f7c46ce766be", "indicator--7a51f92f-6125-4139-aadd-f3b6e9972d09", "indicator--14dafdda-5e7f-4d73-8a99-d7ece4269033", "indicator--13de5064-6327-4484-9ed2-bf0b09b4d045", "indicator--ab1a38f9-ea3c-4080-86ff-b5a04cee9d09", "indicator--caf88908-d1a9-454e-aa71-3e1d3011f39e", "indicator--68b0bc6d-1510-43b3-b2d4-abc5da3b9c20", "indicator--457fbef4-0255-4223-a367-902dc725ad54", "indicator--f915692b-06ae-4ba3-bf08-a9a23dadd4f5", "indicator--5dbe8be6-4567-4e40-b063-ffe7da629f50", "indicator--3c5862d7-51f1-40f7-ab6f-d1a71d89dc65", "indicator--80dba226-1dff-43b5-ab56-62117e9d5d81", "indicator--077dbae6-af3c-4fde-b141-16112d4b0613", "indicator--87e86b05-ffe6-4cd6-a891-d827e4b12d5c", "indicator--0bbcb68a-1bb8-40ba-a634-69cf2395f1c9", "indicator--f9f4ae36-1e33-4ae3-8cbf-aab8f8b49ec3", "indicator--2bc17ee6-447f-490d-b84a-13745c893824", "indicator--a9a95d40-da15-433b-b76c-4e55cece72a6", "indicator--2d7604b5-95bb-447b-b946-47da81431325", "indicator--4789e044-004d-4d0f-9ca9-3d3b409ca4b6", "indicator--d54aa247-256e-41fb-948c-c5e0b9381a49", "indicator--262641b0-a8c2-4674-b3e8-2e2902689594", "indicator--2641a559-5eeb-4683-8e00-7e2217e944ec", "indicator--e513bfb5-2012-4f77-8abd-cbea5019b310", "indicator--a6a1768e-98fd-4999-b2b9-5d5d125e2d03", "indicator--e783b0b0-8a29-4b17-ba8f-136c2abbddb9", "indicator--99fa45ea-0618-4f59-be00-77d9f034cc31", "indicator--7f965196-b066-47e0-b14a-3670c8c30af6", "indicator--b9a4539d-616a-46e8-ab58-327e20d4f2c2", "indicator--0ae0643d-7216-4e5f-80b6-7ce18771beea", "indicator--6d8805d5-3d12-414d-ab45-f2e96df6f74a", "indicator--e4117d60-e5b3-4295-822f-87c55baa80de", "indicator--59d7faea-5290-4511-870e-db30b62fdcf8", "indicator--40c9b21d-5758-44a1-a7ff-044acf97c421", "indicator--907e18bd-4407-4ab4-9019-bbc6eaad1c2a", "indicator--ad0e7b9d-a4a6-48e0-bf3b-8cef63daa08c", "indicator--d34e294a-acdc-4066-b1dc-9f771c2564d2", "indicator--d3728271-ee4e-4990-9cec-62173b23eebf", "indicator--dab9cd51-a837-40c3-92d8-886feb7da317", "indicator--f2e80dbb-da8c-48ae-8eaf-92d3031c42f6", "indicator--5c60f1a4-e8c5-4240-9e41-f9ba8cf29f87", "indicator--34fc7c73-5d8c-413f-9e13-969583378e2a", "indicator--20c7b78d-09db-4858-b906-bc610a843743", "indicator--94bec081-6681-465c-a739-bac43e4cbd72", "indicator--6a087894-5b9d-45f2-ae7e-43047f21974c", "indicator--7042d2c1-ec9b-46a4-bcea-bbe7027ecc8d", "indicator--35c481f2-ea4d-4a4f-aded-0cc8fcbe3e9c", "indicator--760c61c3-56ff-46c7-9135-d7075b489cb7", "indicator--c7a8e865-143d-4624-bb44-04b12c1b661e", "indicator--5eff04bc-4cd1-402a-ad11-c9ba7dadcc17", "indicator--c3b7e8a6-1dcc-41f7-841a-999d4f43a275", "indicator--76e3b66c-a67f-4eaf-bad7-645f96a84cd7", "indicator--26aa359e-d751-42a3-9973-cdc55e730309", "indicator--776d83a4-43c3-4a00-897c-22407cb9d022", "indicator--6e3b3203-d532-440e-8102-ae0fe3585877", "indicator--34b40360-b7ca-470b-8a26-2382febde773", "indicator--4a58f3f0-7a4d-41e9-8f66-e44339b86cb3", "indicator--1654d2fd-9ff8-4284-a3e1-d8333e5ff800", "indicator--0f05fe9f-6281-4e5f-a2fd-c03a698e664c", "indicator--488fcfa7-1041-4dc4-a721-0d8a0db1c3e4", "indicator--6ecfd7e2-d3fc-490a-a322-967e8813d4c1", "indicator--9e49172e-7697-4727-b7e7-bebd02e728eb", "indicator--a058d40e-6e65-4e80-8836-4b872696b18e", "indicator--83fec4ce-4bbe-449a-ba8a-a7a87a932923", "indicator--b8c68d0f-776b-4c5e-88cb-32f497baf6d4", "indicator--4f8c7f3b-55e4-4617-b3d1-bd86c301b86b", "indicator--b7693478-da28-4fad-9a6b-faa272aa4f89", "indicator--b4094ab2-806b-4859-98de-f5f7e9e9bba0", "indicator--415b9553-79e3-4c8e-bf85-fa5cec00e341", "indicator--2769e4e3-d272-4d22-8482-478b117184af", "indicator--a62f505b-d9d7-487e-b3f9-ca0321ad14b6", "indicator--08cf3db6-7e8f-48a1-b3a9-353d90dc9722", "indicator--aba10e3a-eefa-49c4-aa2b-252141d4168e", "indicator--182cf6de-ce90-43f8-94f2-7e750ac17243", "indicator--8a37f88d-fa1d-4213-8080-6e1a7000c2b7", "indicator--db7ab404-b7dc-4983-848b-462e7de5d667", "indicator--4276f229-260d-4a31-9db2-db695ec8e9a8", "indicator--83b991f9-e077-435f-b12d-0b25b4634667", "indicator--816f7fda-5ee3-4d11-9310-aea9df8a548d", "indicator--0479d07b-7221-4621-ac1c-c2c1cf4404ee", "indicator--9bfe20cc-946a-41ee-8a2b-c014015ac62d", "indicator--6ad50bed-e15a-4737-87b8-3af6bac5bace", "indicator--67aed092-f00d-44f9-8809-03f7edd2ec4d", "indicator--b6bf74e5-417a-44f5-a3ff-dfcdc3a457d8", "indicator--2794ef33-9403-4d8e-9a8c-d0a357ef805f", "indicator--f1fbb326-1e13-4459-8af3-3fddf2f8b815", "indicator--c66fea0e-e645-4426-b40b-6f8b60b1b08c", "indicator--34e93ba3-c48d-4e81-8723-1f2efc397c3d", "indicator--ca13b97f-7c1d-468f-83c2-02bc12cbf9c9", "indicator--707e8697-d596-4120-be73-8e3758d6b9ab", "indicator--a6cf398d-d9a3-48d7-a778-ff7ed17e7c80", "indicator--820cf60b-c78c-4b5b-a74f-8b60fe651bad", "indicator--339992a8-0479-41c1-b2b4-afd879b9f781", "indicator--5d47a294-98e7-42be-b810-c99aa119a721", "indicator--7dd384b3-b681-4d1a-b070-6aaf344812dd", "indicator--8286ed20-ba2e-45ed-b070-1aafe8cdf64d", "indicator--91f67a90-9273-4048-b70b-764c312e0923", "indicator--84ac07c8-af02-426d-a915-2c45614eb64f", "indicator--bd61463e-2ff0-4bff-b32d-bab57b03f177", "indicator--52b652c9-ee70-409e-af06-c846dab88d47", "indicator--a93df42c-07f3-4a4b-b22e-dff27c786a8b", "indicator--0b08b5f0-dfdd-40df-b6fe-bd4a36809670", "indicator--f72c921c-acc5-4700-be1d-09ef3c77a232", "indicator--59ecb975-da9a-4aef-ab75-4ac78959c0aa", "indicator--2b8e757d-6d71-4612-bb2d-d255fcedff70", "indicator--316ecf02-9c59-4c49-86c9-688304226d64", "indicator--4efbfedc-fb68-4261-98f6-0f50d602925a", "indicator--594714fb-ac3e-4b2e-9824-81c46d276d82", "indicator--b5856459-ece9-45af-8b05-66d20e0b2de4", "indicator--0c322da5-2d82-4eba-8734-a867ecbda526", "indicator--2988879a-6537-40bd-b445-b71725d2c0a7", "indicator--b29442bb-e1e8-4062-a5b8-b8f39888a75c", "indicator--eabafe49-c788-4d7a-b930-924c7a206080", "indicator--4322f0d5-a601-47f1-9018-f5f3f4d1934c", "indicator--37c3289e-ad39-4f45-910a-d03096cf554c", "indicator--91264edb-6ca7-4c1f-9e0a-7b816c53cf2d", "indicator--d60ee7fa-f31a-495a-a710-4aa6a39a7072", "indicator--f0d856c7-f273-49e6-bce0-f82700858e3e", "indicator--d3973a67-168a-4824-a421-c821e43cca83", "indicator--e16b8447-21a7-4006-9860-613672b41bda", "indicator--eab31f5f-3ec5-442d-b198-80bce6a3edf9", "indicator--afee7505-14fc-4718-9197-baa6447eac7f", "indicator--a4e371a3-18e7-4394-a1d2-99b2f4c23d48", "indicator--5af2f438-9064-43eb-8c34-f6322f7f9780", "indicator--98c256c3-de27-4e12-be03-afb7d6d089b5", "indicator--422e43f1-3ac6-46ee-b5b3-1f4f45a6f29a", "indicator--4e3c17e4-0f1c-4e6d-9eea-d23749ade97b", "indicator--874ab25f-af6a-4d96-8a7f-36c70c562da5", "indicator--24bf3c6f-e516-491d-abc3-02e59e92c9f8", "indicator--29d0c549-3caa-47d9-8305-dfd628d8a746", "indicator--580fa7b7-d1bf-4e49-8b3c-ecdfaee795f2", "indicator--2ea9db93-ff51-4333-a86a-54f3205e3a0d", "indicator--6232a89e-5007-43d3-84d3-76c8c18adbd8", "indicator--7ac13b02-1165-484c-9830-4d5e9c74d032", "indicator--c5ae07e6-c932-4161-8d2e-a8f12d7eb8a5", "indicator--e2f955bf-0ba7-4bbf-95cd-047e82784d99", "indicator--5ff1329b-c5a4-4c28-8cd0-96dc92a76b0d", "indicator--89dd1beb-2d51-4cf3-8fd5-e720a9174a73", "indicator--e92399e6-e3e7-4779-905f-4bcb7e08a844", "indicator--084b5de7-38f2-400c-a84e-2ed550f399ad", "indicator--fdaf1f08-5045-4c74-bbef-ea79659f81e4", "indicator--63087c85-7bc2-407b-a971-eed2c8812cad", "indicator--73d11f13-7def-4dd7-815a-702c3a384672", "indicator--2bacf7b3-c922-4511-a339-92ba7db3def2", "indicator--ab245106-8fdd-4d13-b2c2-b40bc322d6a7", "indicator--496e96af-2601-4135-9899-6e79cdadc86e", "indicator--e97c6d3f-f8f0-48c0-b50e-809d0236babd", "indicator--f93026d6-1b41-4fab-be21-db95b6adfc13", "indicator--f9b45d34-16b0-4aee-a61e-f7852fdf8558", "indicator--8530c6f0-e262-47c9-a134-aacd1771a8f1", "indicator--47feb29b-4315-4eff-908b-f7a5bde7d3fa", "indicator--0bd95bb1-0dc6-4af3-aabf-b2ca0f46514d", "indicator--bf2819e7-c271-43d6-9ab3-c49ff9ab5964", "indicator--af291fcd-4f2d-40e6-84a1-a374aae5efed", "indicator--4ece9079-f12f-4a71-b7c7-d16b56917e8e", "indicator--44d57bae-fa98-4230-a70a-41cacb91d196", "indicator--07681d8a-e702-4d1f-9b06-6a4422a99abb", "indicator--754b35f6-a640-4d6a-8406-3cd166f6d35c", "indicator--5e2f892c-561d-4653-821e-150f5a3d1df2", "indicator--916ac6ed-561f-40db-9477-8129422cf6ec", "indicator--3b96e689-82e7-4354-81b8-056dfe71ceec", "indicator--bf55d128-636e-49eb-9f81-7c0fb62f3493", "indicator--ad3afb49-e50f-49a2-b6d6-3c93168d0d46", "indicator--7919e1e0-f53b-4fd6-a429-e16dd421efe6", "indicator--5f80de76-8ee2-431c-bd51-d6c1b72d9de7", "indicator--4324aee8-0605-41ad-b7b5-d24923577ffe", "indicator--0718f8d2-eed2-4f2f-95b4-2dd3ee59a979", "indicator--b38064a4-1a30-4c32-bf9b-0c1aeb364e37", "indicator--0493f81b-8690-46a2-84fd-b5ef3d149f5b", "indicator--2511592d-6641-4e06-9d0a-50993f29346e", "indicator--64b7902f-9190-4fdf-9624-2102faf3c5ec", "indicator--8816c7d1-7fb8-410d-97d9-e92633b07760", "indicator--b7e6a777-92f2-4466-a485-5f75f8289ee7", "indicator--b032ff4d-1e73-4c4c-ab5a-6583850a6f06", "indicator--4ec663e2-f0d3-462f-b423-dffe97f4e507", "indicator--5818ff2d-c744-415c-b42b-5537ddb5e0c5", "indicator--ce515181-a3c1-4e75-8eb2-dc84c4ef354f", "indicator--66b26d3c-71e2-4f78-af62-23101880d680", "indicator--58402a34-eed2-42a1-833a-47693345bc27", "indicator--d0d48a10-5ad1-40b3-9800-f4d92de0f5aa", "indicator--f17876ab-5311-4cff-934b-5e94d9495b89", "indicator--22090fc4-a8ec-4505-be94-efcd8bdaf018", "indicator--81d73d99-b633-490d-86ca-5fc3afe1ba03", "indicator--1827807a-0eb7-4a33-a2d0-b4575b6ed4d0", "indicator--7b896c6b-c874-49be-a220-21a1cb975e81", "indicator--cea7c87c-3623-4cb9-b2e2-0d131b63e2e5", "indicator--7167c1cd-f2a8-4f8e-9a0b-ffa3be6c1615", "indicator--33858d07-7b90-439f-a36e-1c9bb41bdd6f", "indicator--810bb2b5-2f13-4906-a08b-547d8ffa85f8", "indicator--bc204e11-4255-4927-83b7-3d1b407064c9", "indicator--54e8880e-f37f-4bc8-ab17-d0e246f106e2", "indicator--8a835206-b654-4f25-a437-a730e698c566", "indicator--946394c2-210b-44a5-bdb3-90cd95c6a5b2", "indicator--73e65390-3b03-4204-8e68-cd1223b11362", "indicator--8ecea995-69ab-4325-819a-e5d9ed8a87e6", "indicator--2ee4c835-1d3d-4929-b048-87a6d042a99b", "indicator--fe7daa26-1943-4451-a4ec-53f7c2d7d803", "indicator--33bf77d0-fa20-4e37-b314-013e57c53f0e", "indicator--b0c9803b-a171-452c-984e-97aff8944f94", "indicator--93841a99-58f0-43f1-8c19-484689394676", "indicator--14994b5f-3d28-43ac-aa22-729ed412c90b", "indicator--abe34764-c133-41eb-a427-22669822e674", "indicator--c4c8eb06-96e6-4f18-ac61-9bed787f89dd", "indicator--46e3138e-d879-480a-9cac-75635c15d383", "indicator--9b8eeac8-01c4-455a-a3df-fdd3b15ea782", "indicator--8efe78f6-dff1-4ca8-91d2-edaa52f22e21", "indicator--9f633293-bfcb-467b-87a8-adf6a45d10c1", "indicator--4f8548ef-8e7d-4ddb-9d95-cac5a77093c0", "indicator--554ab020-16f6-4c2e-9d8a-465d973abed0", "indicator--4774443b-62a8-49de-8b04-188a654b6aa4", "indicator--4555d9e6-bf78-4f95-9428-b2ef9254ea69", "indicator--e98460cc-4c26-4449-bac6-dc05e7fc77b8", "indicator--3361bd21-2179-494a-9091-6546c88ec399", "indicator--bd90a579-3489-4b28-a0c6-e7e096afe302", "indicator--5ba8efb0-9f8f-449a-8d9e-7673ebb75911", "indicator--732c23ee-e987-405e-b09d-3d9757c41540", "indicator--13d5b7da-7429-4498-8264-a33936dcb461", "indicator--4041713c-d7af-4fd6-b8f6-92070304ce17", "indicator--8088dd0b-56fa-4dfe-aa77-5490cf88f17a", "indicator--7491118c-daec-43bb-b939-271bf42065b2", "indicator--8fa0d076-ca1c-4666-8133-70965d7507af", "indicator--8300c20d-8f1e-4dfa-83bf-caae02e82885", "indicator--3826d0b7-89c5-4d51-a26c-0ec256ae9f9a", "indicator--159ea749-a0b2-45fc-8faf-b71cd0fb4cab", "indicator--213c3811-ad73-4f79-b59c-746d3aa63906", "indicator--5b6b1ce6-41c0-4a81-a50b-34935c8cf520", "indicator--2134bb36-0a18-44b0-952a-aa624094f764", "indicator--a4368cf9-eafb-4346-aa77-56d6cb2745d8", "indicator--715de4f3-de51-44ac-b809-7305a1df1809", "indicator--c82e297a-762d-4de3-a6a9-c6d0aba32e29", "indicator--a565fc48-b384-425c-bc37-bdec6a5e5814", "indicator--a95221fa-07d0-4507-9c54-be5fede6945a", "indicator--ea773ca3-81e8-482c-9d6c-313b7335a1d2", "indicator--7b867ef1-0216-4708-ad33-7991c4378bdd", "indicator--30b39ea2-f8b9-4f7a-9eb4-6e830e3f27a2", "indicator--a748e5e0-00ef-4c96-bcec-cdd2030036e1", "indicator--44eea1b0-1884-455e-9235-fbb64383a10d", "indicator--e6bb286b-30aa-4df0-bd95-c44a952475e3", "indicator--636db9ae-fa2c-40ca-b2c0-cfb721b0b61d", "indicator--61d4ba2c-0b67-4b3c-83f0-938af97e72f1", "indicator--c5fb16b0-a3fa-4b78-8b82-881c565d23e0", "indicator--516fbcd7-7e7a-4151-b520-b3053c60985a", "indicator--c84989bf-e5be-4097-a92d-9524ac2b26d1", "indicator--785aebdb-907d-428f-8b5e-2202dd08a9ab", "indicator--e61eca77-106a-40a1-85f6-5cdfdda57b9c", "indicator--87eb7431-7584-4e4d-9fe9-d24023c4a459", "indicator--3e9f08fc-607c-479f-9f91-73da486d897b", "indicator--1caaf0c9-ca3a-48a8-8f0b-617a12d24f4b", "indicator--4d5b87ba-1a74-49f8-8a32-598382364afc", "indicator--0d875ae1-076e-43ca-94c4-ff4835cf6aa3", "indicator--893b6c5e-ccf0-409e-a711-04d1b554fb2d", "indicator--26aeecc6-8975-4b73-8519-117cfc02f2bb", "indicator--2cac610a-57ab-4dce-b499-e304641e4c51", "indicator--06ba6e5a-10bb-4f21-99f4-71dcb6ab9fa6", "indicator--d9a556f4-6b51-4659-9fcc-e1f1256ff397", "indicator--eede5d8f-5320-442d-8dcd-c0ed12ca327e", "indicator--200639cb-9f16-4ab4-b7dc-0363b13cc3dc", "indicator--e4f11a1f-20e8-4f1b-b57b-e8578cc266ff", "indicator--ce737349-2eeb-4c28-b063-63cc68858f50", "indicator--ba945bfd-a39c-4ec5-a1ca-582c236ebe18", "indicator--3b751f5a-8aff-4716-b11e-90e785400ae0", "indicator--d4031315-7b70-4aa9-9b22-cae721283b6a", "indicator--abaff418-5af6-4f76-a2ae-965e52193912", "indicator--4339961b-f197-4b28-9269-7a425f4064af", "indicator--f81987b0-e5de-447e-bdaa-49f26d6c7bde", "indicator--d0eb57ad-8898-4e26-a36c-4e91ef6ecd27", "indicator--da6475f4-ea1a-4ca1-b842-043a94b9aa78", "indicator--09f82dd0-f33e-4a4f-b673-df2d1585a773", "indicator--c8554fa6-0201-4b53-801d-a3d99250d7ed", "indicator--59f07aad-6705-4cf8-b219-81cae7cc1b65", "indicator--d132fbbd-7b44-4e3b-8c62-ea7a01e79270", "indicator--114759a7-522c-43ca-87d4-a8fa2c4b28f1", "indicator--567ae933-cbfd-4ca5-9604-988691af9b15", "indicator--97a663f0-6cfe-4bd0-abcd-eb82fe700fa5", "indicator--7295f3d3-37db-49e7-bd1a-3de3da47187a", "indicator--34623866-7d4c-47b4-b0ed-579fc01f276c", "indicator--b7d690b1-81d3-4a75-90e3-2e4750996373", "indicator--96b778d5-f754-41f4-a9a6-685084692b0e", "indicator--0d26723a-02a6-45ec-ba67-678951a99ea7", "indicator--e01ae635-23ba-49c6-9189-11c30d25a932", "indicator--323f62fe-5677-441e-b05f-a2386a2e7c43", "indicator--d4783039-7102-41e0-8a19-41421d34ccda", "indicator--1d93aebf-e9b7-4563-9f5b-1a1effa6a04e", "indicator--c9de9c13-0dfa-488d-bb11-1ca96b484fa7", "indicator--4363c600-406c-4c28-8f64-e38fa2f079f5", "indicator--d1b0e19e-d86e-4d1a-9c10-19901d58e2e9", "indicator--f047db9b-b299-4632-8f60-89ccd4cfd622", "indicator--35f264b0-ad6b-4c09-b39c-903d617f6e3d", "indicator--aced4c95-8b09-4774-87e2-8b8db89d3dff", "indicator--2fa23acb-e64e-463b-99f2-ab142eabc5b1", "indicator--1f8a32b4-1924-43a2-a0bf-6b069d00b0b0", "indicator--9f069fd0-1ca8-43b6-9898-5ecb54e3d058", "indicator--102b5f8d-a407-4574-86b0-a9acc53c346d", "indicator--21ed2d9d-8876-472a-8e97-781315aed64e", "indicator--7e5b2051-f1ad-435e-bb27-f6dc2f5e53bd", "indicator--00c894b2-38a5-4835-9216-ea01952495c8", "indicator--524e3879-a246-4663-9b94-b7ecbb759b24", "indicator--e4078697-51be-4a91-aec0-c16f4931ab4c", "indicator--82aed898-e057-44fc-baa4-77acfea7c0d9", "indicator--c1f6acd9-46eb-4cd2-9838-3c13fcb79f68", "indicator--89ebfdc2-c86e-4fa9-8a9f-d80e074f90ed", "indicator--a74b017f-9fa4-49c3-8eaf-fbb3d9353b5e", "indicator--aab41133-1b74-4f50-8f71-725625e09253", "indicator--5accfb3b-9e24-40f1-a676-0533d8a6024c", "indicator--f8028cc7-c7e0-41ea-931c-3053fbcef5c2", "indicator--acc17857-d235-41b4-b476-e577541a611e", "indicator--b119f9ba-a705-4f58-9115-0a88c9c7d2f7", "indicator--96f06586-2a1b-4eb7-bb72-5f3c494768c2", "indicator--6fb2bb47-70d3-4a00-b5a9-f4f04c1bebd6", "indicator--5dcc1d4a-a40a-4007-968b-6aa61fdf6e27", "indicator--a3cf003c-b9d4-4fb9-aff1-d06c2b2ee20b", "indicator--4df90911-1e22-4eda-8cf5-e2ba76dfa5d9", "indicator--c663b7f7-7eaf-4097-8ffd-a692a70e8973", "indicator--a0be1e93-fcab-4dd9-804c-1abfe48a1ad9", "indicator--b838e44c-9210-458f-b5e0-69511655247c", "indicator--dd2e6e69-79db-4e87-bb6a-a05879ee5f53", "indicator--e2a88fb6-1a37-43f0-8835-e2ea9a27a9f1", "indicator--a562a5e0-eb26-4385-8771-0d9c7e7fde42", "indicator--5a4b0f92-981c-4ac4-ad45-61cdc7243f91", "indicator--f1b16d87-710b-400c-80c2-07530f013b22", "indicator--a74e56b3-8dbc-479c-b3c9-91bac96d742b", "indicator--c21f2b4c-c717-4bc4-8786-366cba3d8044", "indicator--36664c42-7481-4b28-9b51-c9e7ad68a844", "indicator--92a7dd18-fdd0-4ff3-a53b-492347afe4cf", "indicator--f03cd95a-2587-4606-8f6a-637e2c6ffe71", "indicator--8cd91d89-1a14-4b0c-869d-8a6c0768360d", "indicator--a3482a69-eb17-4dac-9659-569453536d37", "indicator--01eb939a-8cda-4163-9dfe-438e654d2135", "indicator--fce51053-498c-495b-a9bf-720917cce60a", "indicator--5e53861e-5e74-4c3b-877c-736f04c8f664", "indicator--b4c0cc6f-f00f-470f-8fb5-13320f6545e2", "indicator--1ea1edfd-08d7-470d-8aea-562a1c947082", "indicator--08859b46-d601-4b89-b407-5c4ab10208b2", "indicator--de37fde0-a06e-4c40-b22f-3b86450a7cb6", "indicator--cafc3e60-427e-4c95-a0c8-e9a067532a50", "indicator--274c6873-ee9c-487d-ac70-010438fc9fad", "indicator--40dff23d-c84f-425d-8c3c-a9f8fa89473c", "indicator--de33d204-11a5-442a-9a25-666b025062be", "indicator--bf9bd86a-218f-4181-abab-d5a8cc20b905", "indicator--4a78526a-0791-4896-a7d4-88735314bcbc", "indicator--7698c69c-dc66-4e62-83e6-4d6720eef221", "indicator--29f2550e-c0da-417a-bf02-f15854ea6487", "indicator--8a6f71be-8bd3-4fbc-89db-6303d9f24fe6", "indicator--828b3efb-0848-4f82-8dbe-623d9a2749d9", "indicator--df41852d-a3da-4817-97e8-61c8a2ea2947", "indicator--3f25b36b-23de-4bf3-b779-4202594b43be", "indicator--5e580b4d-fdd4-493e-897d-a678f69820f0", "indicator--b3f391e6-46a0-43bb-a004-44d0395bd6fa", "indicator--98937c80-d5bd-42b5-83f3-236eb27033ee", "indicator--21e88480-ff78-4b36-897d-c4c4122de236", "indicator--3a137c88-89e1-4d9c-ae55-0ed9879ae83b", "indicator--edaa30b3-8ad4-47c3-8c40-4cc10d41698f", "indicator--87ae345b-f471-4fe5-be78-89d63b2eb95d", "indicator--ec69a98b-5de3-4be5-89eb-1a935a5630c8", "indicator--c84944f1-1b28-44d1-a4f8-bc7df7a12791", "indicator--00a84691-665b-44a4-a474-ab6bec13afda", "indicator--e1f5b8b8-cab5-49eb-b03e-0f20bc522525", "indicator--265db731-e840-47e7-8030-35226edae49c", "indicator--054d381a-ddee-4293-ae3c-2f7b101a1a89", "indicator--8d62e016-5001-4772-9358-52e5c0ff17de", "indicator--1f936ba3-2e7b-4428-9510-621344e899f1", "indicator--8115b1e0-f4f8-4709-ae5c-e25f1d4d75a2", "indicator--572e1abb-2e1a-4b67-a4d9-16d2f72e75d4", "indicator--ab87950e-9146-4493-8142-c39013133e6d", "indicator--5001a3a1-ea29-4cbc-b446-7435f0d88ef7", "indicator--8c7ca4f1-c65b-4580-99d1-84f1fbc8d8ff", "indicator--5e9f581f-ef60-4451-9758-c639859242a4", "indicator--59612326-4cb0-4bf5-908d-5b3e04f42681", "indicator--774cad05-6d22-4416-abfa-2851cd7b4378", "indicator--0e1a37dc-1e58-43e9-bbaf-2b398e03f5ec", "indicator--8dea3b11-e743-4ec3-b3ea-0f2b42ede6bd", "indicator--b4b183ba-59ef-4d37-8989-76147a5bc9eb", "indicator--0b75243a-41f8-4db7-a693-37ee71817a7e", "indicator--bb7f44f9-d50b-4501-a576-d3278e628b95", "indicator--a81be5bc-2eb7-4e89-916d-69628495c8cf", "indicator--8cb45b0f-9c9a-48d7-ad04-83179761177b", "indicator--c72ad128-828d-405c-8595-e4030b8a64c1", "indicator--d3c8962f-8f8e-432c-9fdb-5fd98b450d72", "indicator--ea3e76e1-3d57-49f8-b4e1-362a34c8ef73", "indicator--cdcb050e-5939-40a4-b555-0bf87be502bc", "indicator--e3c4b781-f78b-4db9-a7d7-9f4d9fa15f7d", "indicator--bc8e1ac7-5f45-462c-a243-0375b3721718", "indicator--84ea6a18-e295-415d-8497-d21ae90db258", "indicator--6a9bb228-ad25-4ae3-8a0e-a2ebedb15c15", "indicator--68712f6d-5b5c-48c1-a95c-77a596a7c3fd", "indicator--5f8624fd-bf39-4203-95c7-eab5cdb1c413", "indicator--188baf34-0a44-4313-a33d-cfad5b04ef8a", "indicator--b8526d6b-6333-4360-b4c6-af3d4dde56a6", "indicator--1368bb03-cfd9-45ac-b73e-41fec4c0ac02", "indicator--72ced406-e573-4527-b7b4-676db742e2df", "indicator--ce8d9c3c-48c5-46cb-a273-c990f5405082", "indicator--1026a1e3-f1cc-4fc4-8a40-06dbd9aea2f2", "indicator--c30a260f-9b05-43f0-aa21-71f3230edd09", "indicator--c8bf753a-4111-4c6a-b61f-320f21733dce", "indicator--80eda782-6b9c-4f6f-a2b9-d71295598298", "indicator--5a65a102-65c4-46cf-922f-dc199a47d215", "indicator--e637dac7-63dd-417e-8b24-077b9edae957", "indicator--a3ecb07d-2389-4ba0-9477-eeddf7dc3c8f", "indicator--de60a03a-3304-4bdd-9bae-11fae79b9274", "indicator--a4fdeee5-e2a3-448f-b678-3df1a7cf75b2", "indicator--8d7011e9-acdd-4693-90b1-4b676f1d4293", "indicator--c6be6450-aeb0-4a89-9cfe-8288f59e59eb", "indicator--396d2c4d-dee5-4a73-b0a5-9ceaacf72ff4", "indicator--66e8172f-9563-43ba-8769-a224e5f55ecb", "indicator--323239a7-0652-4298-9c72-d77505bdec3a", "indicator--de1ba001-52d1-4ea6-a0fc-8fbb69028e6f", "indicator--74a597b6-4348-452c-8021-5024dfd9c39e", "indicator--6f1e2a9a-607f-4eb1-8b13-0f24ef82caa0", "indicator--136b221f-e9dd-490b-a7e3-0a01eef94fba", "indicator--01eb40b8-54b8-4274-b798-6ffe97c33937", "indicator--f5952503-aebf-4306-af54-3a549a6eeb4f", "indicator--225d36c9-87e3-43f2-8b1f-dd56a2f04afa", "indicator--1451f0b9-9e39-4f4e-b7b3-d3f092ed8401", "indicator--0db8ba04-086a-49c3-83cf-675bc1a988c5", "indicator--fc033b07-d6f2-4d73-bb3a-b84c37fd7e6e", "indicator--d21d3455-2da7-4600-b603-d45bf13dcd56", "indicator--44f075cd-c446-4881-b8c7-0121282c6b6f", "indicator--9750a601-4e3c-4420-a743-755d3ef7157f", "indicator--a7a7be0d-458c-4640-a086-275375482b2e", "indicator--bda3082f-07c0-4543-8dc5-6e1d024aad0e", "indicator--b1f48578-544b-4fe1-8e09-6deb4e619c37", "indicator--5cf774ce-bc2f-441f-a4d0-0c7ede23e993", "indicator--44392686-232f-4a7b-a3dc-a97c2e14d992", "indicator--72d2ef67-ee4c-4ce1-9075-af27552ddb64", "indicator--c8349d29-808a-4551-945e-6dedaf526c7e", "indicator--430f4a2c-9428-48fe-868d-d98dcb2b46aa", "indicator--018c7e9f-63e4-4a72-92d5-2e3264542072", "indicator--e65dc796-68eb-40aa-ba87-237ddb79bc87", "indicator--4291cc6a-43de-4392-b673-6e461e274dbb", "indicator--9ddc46b7-e9c4-4c11-a5ec-89f622a04096", "indicator--aadd31fd-0063-4293-b71f-ecf487150c7f", "indicator--b75ff646-8ba2-4bb8-bc5f-fea7f1b48a7b", "indicator--58c82d58-f7f9-4137-8467-632aab6fcd1a", "indicator--0f1e0e71-b3da-499f-bdfe-be7f34299593", "indicator--a6f2d8a7-6d08-43d4-849f-c57d3176fe0f", "indicator--c30a7864-b333-4dc0-9fa4-2d5c915e1cbc", "indicator--2178b025-28e9-4d38-95a8-75888455b3cd", "indicator--309858d0-a73d-4bb1-bc8b-7bed1b7f0f00", "indicator--a1c70519-adf0-4708-b338-0f44e1d93c97", "indicator--245559e0-40ff-427c-a085-be12b39b6520", "indicator--f6d1f6ae-aa80-4871-bf12-8262aaf404b7", "indicator--3b5fe677-c224-4978-9ea3-2f34a04b297f", "indicator--0d506ccc-2891-4aa7-bf90-15fb823712fd", "indicator--5c70dace-941d-4ab6-8d3d-77eed86f6206", "indicator--d1aa5fbb-adfb-46b0-9c70-6bef88b2bdae", "indicator--f627927f-8956-427a-bc7f-95e986fb2211", "indicator--4ca442b8-ba5f-4bf0-9c30-e27c0e0b0812", "indicator--d285e9fe-160d-47a6-a063-345e1d901da6", "indicator--848eed3a-d29c-41d2-8713-ef6d61d741f7", "indicator--6e830539-8abd-43eb-bb83-9e0f6fd7ca4c", "indicator--648ef77d-689f-4ad2-94a7-346aa576f20c", "indicator--bdb2eb44-520b-4aeb-8bd6-0dd9f1d1af11", "indicator--f7825610-3618-49b6-b3a7-b4038b06942e", "indicator--02b01766-add6-434f-9c43-df33259bdb1c", "indicator--bf6561fc-c828-41e8-9ed3-137d6ed9d64c", "indicator--3687b327-2f5d-4c52-8ae5-8659863bab2c", "indicator--64a2200c-6ce6-4071-a3fc-010305208b46", "indicator--1c98a5ff-5b55-4db4-96d1-a96113d316b2", "indicator--8d6940be-ae37-4277-b24a-fd4309524e46", "indicator--241b2c92-6bbf-4eb8-b938-bc0c7415f960", "indicator--1a3770d3-fb45-44a7-9999-e35e176121f4", "indicator--c0b85446-0fee-4159-9b5f-fc2215294b34", "indicator--d4cecd71-3ff1-4fe8-a081-38f56d3245e7", "indicator--3d6aeb08-86a4-4a34-a52a-facbc73e919d", "indicator--41a81983-e0a4-44cf-9692-ea354b859a3d", "indicator--f6a12019-36d8-4a3b-979c-f36ba9ccbc2a", "indicator--87515f2c-a0ae-48e0-86b2-60e26ac07e7f", "indicator--67f14cfc-2cf4-4143-83ed-bc713d233efa", "indicator--5f0a205c-7441-47a5-9b32-02c8d5befd19", "indicator--adbd5584-dda6-4f17-98f1-679705b3c784", "indicator--ee30eb8f-ab52-4108-acfa-caeec97cf5fd", "indicator--4309dad5-5c87-4f1c-a23c-00861f1cb8c0", "indicator--b32b64ba-c695-437a-8bdc-87162e6bb127", "indicator--bb63db8f-9f34-44d2-b0f0-d61d846f9bcb", "indicator--3c08df96-d64d-4ada-aeb1-5cef73317e7e", "indicator--f772a589-ed92-4da0-95da-ceb7227abc4c", "indicator--30ee7f0b-d682-45ac-87a4-62b5f719ddfa", "indicator--a9002cb1-3db9-4e7a-85fd-ffb4c3b8b01f", "indicator--b12d43d3-6d92-4d73-9f22-897c23b2f326", "indicator--20a9039f-e6a7-4a17-bceb-05897dcd75ee", "indicator--c59001fb-91e4-491c-853e-92197cef2745", "indicator--307b629e-dbe1-4903-917a-71146502401c", "indicator--170d999f-4a6c-41f7-8c98-197f67726c45", "indicator--cada7e19-c543-46f7-9918-68ffc39a6b3f", "indicator--0f57d126-4086-48cc-a6a9-deae985067de", "indicator--2b5f318f-3ec5-4669-8738-9d20ba3ac5f2", "indicator--d138d282-c338-4bc0-baae-733802505ad8", "indicator--5160815a-883e-4bc0-a458-37514ec9ca0f", "indicator--2980eeff-d24c-42aa-b087-4259394e168d", "indicator--47ba857e-02df-4940-8952-4700211ebc9f", "indicator--dbdd4e17-fd14-44c8-b40e-c6ef60f6b11b", "indicator--832c47de-8fda-4a54-80f3-57132690fe3f", "indicator--6d25c058-1ea3-4f7b-8cd7-eed520f26994", "indicator--772b5190-de73-4e1a-af5a-244f168b0a46", "indicator--5e98dafe-4a44-4402-9b4c-633aa20cd835", "indicator--1b722859-68b5-4a1c-af81-009a91a39063", "indicator--97e505da-9eaf-45f0-83b9-5bc95e43f119", "indicator--7383f92d-e3e9-416f-975c-1f45761c19a7", "indicator--3020038c-e4f3-440d-9bca-9abf69958e71", "indicator--3ca69f69-c943-4fac-957b-0e6855ef517e", "indicator--56e8b9df-fbb4-4015-840f-72926b3dfc5b", "indicator--eb6be29c-9bab-4bb4-b75e-fd78eb023432", "indicator--74531a9a-a325-4104-ae4c-12487fcc3905", "indicator--69a4b563-b333-469f-88ac-509976769081", "indicator--1290742e-a236-47da-88c5-367196a4a55e", "indicator--cd7c274b-4b6f-4834-b858-93daa9bae572", "indicator--c152023e-422d-404a-af45-9c7d699a834c", "indicator--3b7d867e-7ba6-40ce-98f6-99fe9303ef79", "indicator--7bd3391f-849c-4a3f-988d-25d7c88b3d1a", "indicator--17aa9e28-3ffa-4ccd-a365-4eb3e5a02ab5", "indicator--ead14f49-0c1b-4293-8432-4fef94091513", "indicator--840f174a-d246-439c-bcdb-657ea7475016", "indicator--177c2bc7-b55a-45c1-a01e-c438c98f3206", "indicator--792ec9c5-2c08-4dd7-bb7a-574224c75de6", "indicator--c993f450-fa9a-421a-8d0c-b041551c989c", "indicator--41c3518f-d767-490d-b5bf-11ef56031274", "indicator--c1098bc0-6302-46fa-a39e-d09f71ea3c93", "indicator--b5bfdbf9-c0e8-47db-8fd7-946789cad9bb", "indicator--10e8b434-34ba-40d3-9a77-f2b1e70306d2", "indicator--8533fb0e-154e-4c50-a4db-615f54af1659", "indicator--b1ee29af-c71a-4f77-93ca-f55fd9034eb7", "indicator--155aeca7-7a4e-4529-bc96-f842892310f6", "indicator--8d69b701-3866-416b-a64f-b0de5b0fdae7", "indicator--25a8f4ef-196b-4e03-afe3-f4b16e00581b", "indicator--3c8bdc27-0e4e-499e-9d8e-43d4883e81bf", "indicator--a1fa8a1a-1085-46e1-adc9-0e1ceeff25e6", "indicator--2ccfc1e1-70fa-47b3-9796-579a5417cbf0", "indicator--0907dbd1-d029-49e9-af94-622458153969", "indicator--7ae7f7aa-5775-4dd6-bab8-8f80ca55ba6d", "indicator--4da71824-4537-4db6-9903-9f68f9c4de09", "indicator--62a81352-6b79-419e-b792-5ca7ebe90986", "indicator--3c4c46b2-73d1-4636-ac76-bfde08d4a794", "indicator--7453b08f-ffe5-4504-97b1-04159f9167ff", "indicator--c3837c62-a055-454b-93ec-e4aece4a9b73", "indicator--dc01b16b-da6e-4f17-be40-964fb45cc3b1", "indicator--f4c83e94-f2ae-4959-b64d-86256557eea9", "indicator--9f20f8e1-002f-4a46-84cb-a01feed31748", "indicator--f064e947-19da-4577-b0e2-ebd0cdd41d00", "indicator--c6c10a43-3fc1-4b77-a91f-796df3c563a2", "indicator--a58bc465-7730-4c77-8d9b-6fe816002ef0", "indicator--254708f5-12d9-40aa-b535-4e978930498c", "indicator--9d9188e6-df7d-4fd8-bb67-cf087b2c727d", "indicator--a19e9aab-e875-407c-9225-97aaf557c298", "indicator--d195a5d4-75fe-4381-a835-098d8b256bce", "indicator--3d811c82-389b-4795-b82e-9d1f6de99b48", "indicator--cd78b413-7326-495c-a279-ae7a40923db2", "indicator--38517112-004f-440c-a8c1-ac6089141c7c", "indicator--a81ff8d0-bd66-4e65-a804-15f734a58b78", "indicator--79836c2a-8674-45fa-8497-41469453e914", "indicator--f9e5dd4d-8595-430c-a9e7-61c949bcd785", "indicator--52884999-42bc-4c8a-b3aa-7eaaed5980aa", "indicator--d6a1e979-f96c-4a61-8769-195a38f4027f", "indicator--e8c8678a-f6bd-49d0-9c4e-72ccbbd3dc35", "indicator--0375df0f-6868-408b-9108-9d674fbc97d5", "indicator--1a84fefc-d42a-407f-b941-22b5242a0dba", "indicator--115cf496-7f19-42e0-acfe-69cfd1351a60", "indicator--68621e56-991f-40fd-991f-0e202899e7d5", "indicator--40882b24-2510-44de-9911-b6a64577ff7d", "indicator--6f1b5def-a177-4cf5-8d87-523627b36b00", "indicator--d0f11b59-3a88-47a1-8a1a-f2ddd1ac98d2", "indicator--0ded2cf4-c073-4f58-9080-321071a5023b", "indicator--20be8a7a-3b3c-46d1-8db8-8969b7038ffc", "indicator--7175c4f4-f29d-45d6-b761-40027e3c4c23", "indicator--0a2bed8a-305e-40b4-a8d0-559a3086f63b", "indicator--034d4dde-cd10-49ea-a5a3-209bfcd505fe", "indicator--620cd178-1fcc-4282-885f-ca07d333ab60", "indicator--28583111-a20c-4d53-b06a-2ad5874afc73", "indicator--e362f31a-cef2-4388-b241-9b0039dbf374", "indicator--38438d7b-2100-42ef-8fed-7a163bd3a964", "indicator--aedfde12-521d-444c-9de6-3bec978ee1bf", "indicator--7cfe3437-35fd-4a10-a143-bac7ef6851f3", "indicator--77cad3f2-39de-4da6-8b42-fb8ec68569c4", "indicator--ad93dcd3-9c94-46df-8ae6-7a2bbb2a89a3", "indicator--1b91bc97-760f-4003-a170-bab0e4b6b16b", "indicator--c8fb7bde-ee7c-419d-bda5-1ed436709ce8", "indicator--e5365399-95ac-48c8-8775-842298ff2590", "indicator--f7b37774-cad9-49a6-8174-cb80196dbdfc", "indicator--70107ff6-d7e5-4d49-b888-e0b204caa692", "indicator--8bdf4d59-27f1-4269-9e4f-26a98c3f0302", "indicator--9fa86071-94b2-425a-ab7b-b3421a3957bb", "indicator--08f97f24-72a6-4dac-a3dd-ee9f745b615a", "indicator--d950b2d5-e1bd-4c3b-9f8e-fe5f060b7264", "indicator--84de15df-be04-4eae-b38c-12974df068af", "indicator--db5cba5f-a410-4a37-be5f-1c4765c3257e", "indicator--5ac5ba6f-4bf2-48ab-beac-31193ff2c3ab", "indicator--bc428d07-7b89-4270-b590-2f6d78e30062", "indicator--e724cdf6-ecc4-4ca8-b8ae-910823c3cc74", "indicator--a90386fc-babe-49b8-a8be-57d2215d8579", "indicator--81579a04-7cec-49cc-a1ce-5356dc44e56f", "indicator--0535dbd4-119a-4526-b986-24ed89ccdb33", "indicator--b3f27dd5-9108-4ccd-8168-1d68ecf6f46f", "indicator--aa049ca8-89f8-4747-a469-8234f9956ebc", "indicator--946a35a3-4f8d-4bd7-9126-74288d235a87", "indicator--e86eaea6-190a-433b-b0f8-970ad4fc49ed", "indicator--3132b39e-a654-4c5d-85f5-953b60240cdb", "indicator--813538d5-6acd-4c88-bc0e-6e92f9472a9d", "indicator--41295251-f43a-4f8b-b651-6e0da4f8e87a", "indicator--e3ffe431-54bb-4504-a79e-85cb20d6ce55", "indicator--d920f8e7-adde-42fd-a1af-15429fe5baab", "indicator--614a8744-a77a-4a11-9c5c-db1f135e5b71", "indicator--823f5d5a-edda-4e7d-8481-96ea0c7db76d", "indicator--9f20fbff-6e2d-4960-93da-81a14a41960b", "indicator--f1baa21a-492a-449f-9c6d-5a467674155a", "indicator--1df639d2-e797-4c35-8579-3dae10fc15e4", "indicator--bcafce94-bb88-4eec-ad51-485555624974", "indicator--9086e65b-13b6-4044-ace9-6e75b1b76a11", "indicator--21bfef12-fce2-434c-9349-5319d9ca0135", "indicator--f288af62-89e3-458b-a7d2-fc2c899d0cd1", "indicator--d6fab49b-7e56-48a9-aa8a-400e64ffc5f9", "indicator--46a9f4d8-6ca2-414a-acc2-6052293949b6", "indicator--fca8589f-7aa0-4c7a-8590-66ff67ebe1c8", "indicator--5941823b-fbe1-44f5-9440-c7073312e722", "indicator--a10c38c6-28a4-4856-8047-e414c5a929c7", "indicator--6fa7669b-16e1-4ee4-93d0-4106f8cc927b", "indicator--4575ec99-cac3-4844-9a4b-9c57fb485978", "indicator--a93bada7-e211-4893-909b-cb0669a838a3", "sighting--d0f7c20a-4cbd-4164-af62-e977cf86ed95", "sighting--24f00de3-362a-4811-827d-8e98bd615e66", "sighting--7c272be2-555c-41cd-bbad-ce4b3b4632a6", "sighting--200593ff-cbba-441a-9e3c-b7c395f9de43", "sighting--cea26bf6-7d83-43ef-ae13-8d27cc8de4dc", "sighting--e8dbdf88-bd0c-4f77-aa04-82bdfe25173e", "sighting--32c353fa-4e85-4266-af51-72c8da405153", "sighting--25749d6f-c60d-4fd9-b27a-cd2976b82b9e", "sighting--3d538965-7133-49dc-b491-4972623113be", "sighting--3a1cd60e-a89f-45b9-868d-cff4ca056338", "sighting--3bc4dd41-a820-48ac-bd1d-ca6489235e3a", "sighting--2694df13-a241-4d98-89b0-60f243b43506", "sighting--09d82c64-8ea8-494f-93e1-d60499c1def7", "sighting--b58f5084-f505-4376-987d-5f64f285a424", "sighting--28092981-fdeb-432d-96eb-0652edfa42a0", "sighting--9a0d4dd4-64a9-4111-b7a9-b25a0990e77e", "sighting--60d0c503-1569-42dc-b2dd-5616cacf9644", "sighting--71d1c084-6604-48a2-b198-374b3f981abf", "sighting--5eb0ac34-e325-4ada-9c24-b87bc9307bb7", "sighting--6f5bbbe9-4687-44c1-a1ee-d2ce5ba1a794", "sighting--57a977e4-2e2f-44fb-bc37-dbb1b900fbde", "sighting--1679305c-b46a-41ee-825e-2cc142648fee", "sighting--b9ac2018-97ff-48cf-aa4d-076c879ec4b0", "sighting--65701ed7-904c-4226-897e-bb6b34fc8ebb", "sighting--26fab873-5a9c-4e4d-8303-fd0258615634", "sighting--f06a25ea-76ad-4852-9149-f24d452f3620", "sighting--6bd4bcd4-54cd-431c-b415-f44c3f4313be", "sighting--35711ea8-144e-4b3c-8e36-e3be0e0a7a5a", "sighting--4424b02f-b0a7-4e54-9c03-c23b0ee5cc97", "sighting--e7db48b9-ca9b-41b9-aa28-753f58d44f0a", "sighting--5f15fd75-2932-4857-89dd-1ba2ff2704a8", "sighting--d1ee0161-03fd-406d-8132-034b8a869271", "sighting--b5e4e2ca-2227-428a-97d6-b064c9562472", "sighting--1df52026-7ffc-44ef-ae70-9b26d0fa5c48", "sighting--34053694-e90f-41a2-9126-019bc5e7efbb", "sighting--0b3c0097-e782-44a4-bdd4-54bb563c1629", "sighting--e0359b49-df49-4215-961b-bdc411a362cc", "sighting--272a9a6a-2921-4b46-93ed-830435389b96", "sighting--d7b646c6-e332-4d69-ac87-ac47a4a84605", "sighting--39c274b2-d458-4831-ad77-daa23800b657", "sighting--44711b71-bfba-444f-8a3e-1d12f3564884", "sighting--9e61920f-bd0e-4c59-be71-7f5e93aa1d34", "sighting--19a524f1-4545-492f-ae2d-3f1c6458897c", "sighting--a31482f2-c7dc-4947-9870-ab1090af7d68", "sighting--bf708f62-7546-4b76-b836-cc984064bd69", "sighting--56bb7ca0-de86-4e9c-af5c-87a5bc4fa5b6", "sighting--5951029d-c8f7-4103-a2b7-1cbed6814852", "sighting--2b907642-7d48-4034-8963-ac316f63d1d4", "sighting--2c9fa544-dc10-47ff-b227-8de38b168871", "sighting--8ff4aa8e-9447-4605-a25d-6910a0d5e240", "sighting--5823738d-54fc-4b56-9419-a1977248ad91", "sighting--870f9654-3066-46dc-a92a-22f5b4a3f4d9", "sighting--8d2a5217-24d8-4a77-8178-92f86114f9e3", "sighting--36f7316b-5a93-4854-9a2a-ab336011fb34", "sighting--825a2cfe-01fd-4c7e-8bb6-d7553303fd35", "sighting--5b2ce842-8e50-4729-a93f-a27cb0a1131d", "sighting--d355bf75-845b-4ce1-a7bb-d1eb5e4844d6", "sighting--ffeaa24c-1ec4-4174-beaf-ab571e2bc78c", "sighting--275c00be-5e8d-4eb3-a1df-9b35bc91c7d4", "sighting--bd895fc1-fbdc-4237-951e-79ef96a9b745", "sighting--68633a0f-d3aa-4872-b54f-80e4fa597c1d", "sighting--61e99a8b-c72a-47b6-9902-581d4c326577", "sighting--f3fce90c-3344-4de7-ac77-5df25e0c7c82", "sighting--a991a68f-c839-47da-977f-0c14628a6c2a", "sighting--62951369-b7d7-4028-8de8-1c3fb1dd456e", "sighting--bf1e5bc4-c312-4119-8e71-4095b21bd126", "sighting--6e42a149-b71f-472f-a449-f9849d6833c1", "sighting--8f95741a-274e-4734-8a41-8f00bb0ccb2c", "sighting--341d37b8-a84f-4641-812c-79ca241ecb2a", "sighting--63df314c-b586-45c9-9d1a-40bb046b68cf", "sighting--1229c4b3-0ebc-422e-a22a-190b0bfce515", "sighting--78691fb2-49a1-42a2-9b8b-2fb090b92420", "sighting--1dbef737-d41e-4d6d-9cd9-23e85b0626b4", "sighting--b058de87-be57-44d3-aa75-482d7d476005", "sighting--94323f78-21f3-411d-a51b-2584cb2dfb90", "sighting--62138d34-58e8-43f6-b195-73c79367ae4a", "sighting--6aab9747-1822-4ce6-9fde-b3a4d2b57f65", "sighting--7efc1246-5403-4a79-8c6d-a4ae4036a951", "sighting--5c9aed24-f313-457d-b85e-2f385391dd1e", "sighting--d02a3c14-ed24-4aed-a532-fea752b8b666", "sighting--e8e020ba-155d-45e0-9800-1ecf9aff2736", "sighting--65221eea-8c5f-4175-9f67-2520f56077fe", "sighting--48602e25-0392-4cc1-8f6b-1db82ca142ae", "sighting--3ce79758-4e7e-4c9f-87cc-21f03e7edfc6", "sighting--d9db6f76-2424-4942-96dc-9dd4070d379c", "sighting--12514811-d71d-48ff-9f5d-f77b61a26b7a", "sighting--bc250059-2638-4eba-8d0e-87f6dcfd6705", "sighting--69aad354-dcf5-498a-ac09-2547708f758f", "sighting--6e1540b5-14a0-4a5c-9211-a1546687a388", "sighting--ac29ac9f-e246-46e6-b34b-bc91b8d99641", "sighting--fcd98793-41e9-40c2-8226-a8f61c5e27d1", "sighting--864cf512-8211-47de-a2b8-13c003ad2077", "sighting--861fbae0-929c-4353-9db0-d10e6a7a215b", "sighting--1e7c0202-b7f1-4811-850b-166625b85621", "sighting--26e28ab8-d4e8-4a4c-b82f-91748f77647e", "sighting--473dd2b6-0d2c-4cb8-8b80-b20f97f3a0e7", "sighting--409fc820-33b4-427e-9e30-71d40cb2bef8", "sighting--0320657e-7ed2-4eef-acc3-293f3c8fc680", "sighting--f6d8f286-a3c6-41fe-837a-7aad1af09e61", "sighting--fa133dd0-3c73-43ac-ae6e-f03f2eeb7f65", "sighting--8498a916-6950-43c5-a529-d568b35d76f6", "sighting--49b7f51b-9bdb-4341-bab9-47e9a5579ede", "sighting--3f089bbb-d857-4330-835e-d1f6bbf51e57", "sighting--ef3d966c-df1c-48ca-b4c6-76c3083eb80c", "sighting--f5acbe81-4908-4083-8f86-499a273d574b", "sighting--1a9b5ba1-a7b4-4bf8-8bae-8cc28eb3ca09", "sighting--8e497a24-10c4-4057-a8be-69bc6c35260a", "sighting--c48a7e91-4858-451d-af73-7b31f2abec56", "sighting--879c3f2c-0877-413c-956c-6d6ad1125468", "sighting--5ce32824-140b-403e-b4df-e9e5f840ac3f", "sighting--3b07ee12-5a31-41bc-a93b-b45e7115c7a9", "sighting--b595219d-5bfe-4724-9bba-ff64eed36a05", "sighting--e1f6f12d-fea2-4948-b1b5-e8cbc3b64bb9", "sighting--4d6c2d74-589d-4386-91f1-7ebd4e7ab270", "sighting--e7855ae7-48d5-413b-ad00-5a97f1100a5e", "sighting--d86ba483-0db0-4af7-969f-2d78c3317d83", "sighting--dadbc5a5-7d52-4453-b2a0-60fe9d65c987", "sighting--e5903382-07fd-49a3-9469-43652e27d18a", "sighting--2d499d6d-0f58-441a-9693-f435272e288a", "sighting--392a3927-11b2-4758-ab88-d02c492afb7e", "sighting--265c92c3-aa60-4b8e-88af-fcd275b1ac9b", "sighting--474f3767-5abf-4658-8d21-590f715ca418", "sighting--8e4a61fd-2ac2-4a9c-9c5d-68df6c99dee2", "sighting--c87ad99e-d2c0-4acd-b019-ae7c496808ae", "sighting--5f637d0c-9d1c-4959-b1dd-d16ed35f683e", "sighting--a1642ae7-b234-42fa-8676-e3e6155229c1", "sighting--02eb3146-87f1-42c5-aa4b-40fefe738a9b", "sighting--f3a88665-893b-4b68-9286-4454e342c923", "sighting--f92f71e0-e11c-4024-b5f4-8abd73c5b027", "sighting--bb5f602a-0da0-4e08-998b-f13c57952e4c", "sighting--ecdb25db-a979-481d-a6aa-0e2d7911db55", "sighting--72a8d56b-03df-47fb-a164-61318d34abd2", "sighting--6846013e-5db5-43ee-89f5-51cd46443f33", "sighting--d92893fe-d8c1-4580-8f40-4811438cf686", "sighting--34a7f134-f9b1-447d-853f-69fcfbdd5d6b", "sighting--4e3d9629-7cc7-4033-aa97-8db8177441ad", "sighting--d9010688-8c63-47cf-a9a0-c2c9af0219e5", "sighting--d4900af5-40a5-4326-97d0-d49972e0e814", "sighting--bddbc589-391b-45c7-92d8-c975cea4f5da", "sighting--8474bc4a-faed-4ed7-a769-f817e20050a7", "sighting--57d58fb7-6872-4b25-98d2-ad6bbcaff037", "sighting--ac579550-eecb-439b-b5a4-fd0ed9d7bee4", "sighting--d3b53df7-604f-4bc1-8fc8-bacb21e71479", "sighting--78fc3a87-7597-4e00-aab7-6411a73ead90", "sighting--01a419ad-694f-43a0-9b99-732f347f2422", "sighting--b8c98712-3a80-4de4-83b2-4f16e8a00c44", "sighting--c19ca108-b8c3-41d2-9419-f1f07d219080", "sighting--93068f55-4547-4a9e-a032-a8a84ba1b867", "sighting--23e65bbe-a257-45a4-a1b6-6819c80ce674", "sighting--4cb6b15e-9e2e-4d34-a68a-405b0a6f3f1a", "sighting--c8803478-a2b8-4340-840d-bdc13d04ca9d", "sighting--fc79b2a0-5bc5-4d82-b55d-fa1f9b4c7452", "sighting--966f985d-66ac-4e31-b656-e3bc396e0e2d", "sighting--6d74b572-e3d7-4cc6-abce-771b0923fb19", "sighting--b0638662-7f37-468e-ac27-44072b55d21d", "sighting--74684bdf-8b2f-4169-ae8a-7ae74feda5b5", "sighting--6e96bf4b-355e-4581-aab3-487d280aa18d", "sighting--98654994-448b-47a5-9cb6-666293ede0ef", "sighting--84b2f0d0-7b27-4133-9709-71062f075397", "sighting--d798d8c4-47e2-420d-8da7-cd25526700cb", "sighting--51bbbd1c-4534-4197-accf-43cb91c4b0b9", "sighting--63ebee86-2258-4258-91cc-0cd9d5af8119", "sighting--a7f7a933-edd5-4dd6-868d-89cc0350aef7", "sighting--e6d4d04d-f070-4371-8d9c-a36c4076cb40", "sighting--9ca56b4e-f86f-4042-950a-191e08d14dac", "sighting--1ad4e0b3-c98a-469f-bdb9-ab6e89372827", "sighting--6cde0c77-a080-4e59-be8b-21d96f71d4fb", "sighting--fec11696-2843-4aab-aedd-3227377c18aa", "sighting--9916b14f-14b8-4060-ba6f-e0455a9a68af", "sighting--dc7dfdd1-2bef-4235-a106-35789c0316ce", "sighting--2d64de14-e988-413e-9678-b93b7ca7f324", "sighting--c7a8eacc-164e-4478-aa57-89b55c8623ec", "sighting--e578a487-238d-4607-9850-4846879a0b8e", "sighting--f3e2bb06-c4f8-4c9f-aeb3-9986e968420c", "sighting--4b81f742-0f9b-4420-adb9-d99a8d0d6c88", "sighting--e910db5e-9793-4dbf-a736-065d9f5a9fc3", "sighting--77bf30e4-8584-420b-8607-4792737dd78e", "sighting--236f3b73-fc80-449f-a483-4d360d8f7e14", "sighting--789e45ec-cc0b-4d21-8d6e-746b801cd83e", "sighting--8e39c0ae-5001-44b7-a5fd-21d6bfed7e88", "sighting--a7b65939-3397-4f23-9c73-3243ad98a9f1", "sighting--e3fe3b79-2ff8-462a-bd2e-5375224a8009", "sighting--b6bd3ff5-343b-4e49-9a1d-be7fb420882e", "sighting--c9a0444d-42e0-4ecd-8f3b-b2f7a3a0e0a7", "sighting--dddd6c22-d9d8-4ae6-8cfd-6a895ab554da", "sighting--02d5da96-4337-4b63-933e-4867594a3596", "sighting--90da4137-383e-4d4d-9f38-74062f1d9dd4", "sighting--beb9ea14-9482-40e4-b504-eb57dad4a5d3", "sighting--700fd014-5638-4012-91a4-ab275e9b7503", "sighting--91e60b6d-60b1-4a25-b923-2e5b7f0b9772", "sighting--1841a077-2afb-4277-a112-821191e8d07f", "sighting--0e56b883-604c-4608-90a9-72dc4556c701", "sighting--8c50e81e-8073-4489-80c8-f5936ece75a8", "sighting--cc06d5af-49f6-442f-a3c7-700d0d024741", "sighting--25b27090-9224-49d8-a504-47fbf1b56785", "sighting--4bbbe5ca-9cf7-4f2a-b342-0ff552e33f12", "sighting--9d1ef1df-144d-480a-bbc3-9dbb2cd2b574", "sighting--e3f59cd4-aeaa-4912-81b3-aaf09b8b4a10", "sighting--e98a3324-ac21-4a08-8445-03aa6bf282c4", "sighting--d7ec2394-f89a-4a71-8455-545fcbff6c34", "sighting--4ebc675d-8d21-4cfc-aafb-c2ddc4f98a71", "sighting--1989ce60-2a4a-45ad-96f4-fa83c7445a9e", "sighting--2452afbf-5585-4480-97fb-c6024fcc02bd", "sighting--95c5d683-ac67-4100-af58-a1d6ea400edf", "sighting--7b1cdb12-6b70-43f2-bc97-2550b0b612b7", "sighting--d51e9051-cc0f-49b1-9d9a-4120099366f0", "sighting--a023fecb-48c1-4bbb-ae18-35e6af973250", "sighting--911ff5b0-4ed3-4c89-843c-664607acb384", "sighting--8e9b24b5-1cdd-4bed-a6c5-5554215392dd", "sighting--37c8215e-a89b-4375-bceb-6fa09d48f7e5", "sighting--1b8f01ec-6328-4f04-a253-fb7ff453ef06", "sighting--1932a46f-1e9f-4d07-8db9-3c29694f34cb", "sighting--3c61989c-5002-4493-94c9-7272fe63579a", "sighting--288e1700-d740-4783-bed8-ae760e8fb881", "sighting--51fae437-80e8-4190-ac40-938f30f3bac2", "sighting--b8d5dbb5-f7da-48ed-a34a-0ab9d68bdc69", "sighting--4793d29b-c3b5-418d-a8b1-979878f224d7", "sighting--a821ce3a-7ea7-4dfa-80be-b68e39e0fab9", "sighting--d7ada042-be3c-4b56-a4c3-c1c5f7dc9cd7", "sighting--77c2dc91-c4e5-4b1b-999f-51b085aa21c5", "sighting--87adeaea-7b77-4446-b25d-a2d25beff6de", "sighting--8649beee-c77d-4723-8211-a891b59411be", "sighting--c934736c-d194-462c-acea-48ccd1f8e18d", "sighting--efb87a0a-29cf-47c0-93f5-e86eb206979c", "sighting--a151d0ab-d076-49af-a00a-f9e535351fe1", "sighting--db7fc1e0-5afb-4640-a693-5cd0e0ee74a4", "sighting--f0b77e2b-aa59-41f8-b6d3-2f4d06801495", "sighting--4eab9789-cebe-4155-9ac3-d7f9d963bc25", "sighting--9f6362e0-6489-450a-a382-d39827bfb931", "sighting--0ceb3b2b-da9c-4ab7-977e-74e23f62424d", "sighting--10b8147e-7239-4992-a807-7a55de5cc075", "sighting--23ec6054-b356-4797-8605-8ac75973b165", "sighting--24ffe46c-8543-49e3-a74c-581b77ce8b5b", "sighting--ab378c6a-7244-4810-a77f-ea7550ee140c", "sighting--0786cc11-761c-478b-8081-0384de43cf41", "sighting--31dc428e-9b33-4ee4-98d0-51a49079240d", "sighting--9c279a9b-114e-41a6-9b28-30e521e84ced", "sighting--12bd73a7-1ac2-4cfb-a374-567966d475b4", "sighting--048673af-7e3d-45a3-90a4-e3d2fc70ee20", "sighting--11271c92-0a58-445f-a537-3834ffcbb918", "sighting--cc63cddf-67cb-4afb-a280-409fd96fafc6", "sighting--7f02d7ff-e9ad-487a-9bea-f292d1b88738", "sighting--f71ff99d-0e1b-4496-b248-8da877edd3af", "sighting--47f155f2-7be0-4eb7-b210-bb5c601520f6", "sighting--db3dc050-9555-4376-8fde-8715ae2a6bf9", "sighting--3eff1e0a-0cd3-4a22-86fb-237e84c2ea00", "sighting--236afe2a-17db-4b44-a0c7-479ce6f784b6", "sighting--fd8a312a-5524-49aa-9656-8478aff76820", "sighting--b2361f0d-0b1e-453a-8983-4c10806c2bc8", "sighting--828bb4a5-490d-4893-a8e1-d12d49311d94", "sighting--c02b03b0-76cb-47a0-9061-ad2c1536c699", "sighting--cd9c7329-e164-4dbb-93ff-724dffd9430f", "sighting--c2d74ed3-fd6f-4072-9040-1ce04f91e685", "sighting--ab4b6975-7ded-4f1a-abc5-72d64d1e076e", "sighting--b40f19d5-137f-4fb6-b3b9-f6511fd08f35", "sighting--c7c872ba-f78a-41e1-891b-1567cc4997d9", "sighting--9332db1c-a5bf-4107-a26f-012859f4ad24", "sighting--f49eee65-72c4-408f-baf5-7052e6956195", "sighting--4ee30d78-f6f1-4535-be1b-d62414989d6d", "sighting--7ec42993-6b63-4be9-9d04-ef711af586af", "sighting--fbb217a1-d837-499b-ac44-88ce37944c89", "sighting--35d8abba-da9d-44bc-851c-817f3ec7840e", "sighting--167e42c6-1267-4968-9c4d-f87ae9815d61", "sighting--a4982ced-ed1a-4d4c-96da-7020e105df7b", "sighting--1466b615-4002-4f68-b5e9-2bb801d10d01", "sighting--e7b52bda-776f-46bb-bf54-e0daf033c55f", "sighting--dc824d05-2eed-47b5-8cf6-72fa1c62ea94", "sighting--c6d4e146-7298-4111-a7d4-7149536f4235", "sighting--a64cc07c-f32d-4c63-a057-64cb5f205972", "sighting--f5b8f622-1113-4979-a04e-989f0958f1a1", "sighting--a725425b-7b2c-41ca-9607-7607339e0f6d", "sighting--ab24598e-a5cc-4838-a401-b7109d50485a", "sighting--8f4eabed-84a5-4ed2-9055-24406ab8d6f3", "sighting--ed2d7443-77a7-42cc-b580-15cdddaff8b0", "sighting--4a3e1222-eb98-4027-86cf-dbf177aa020f", "sighting--0adf8983-a36a-402f-8f46-84b40f8cad10", "sighting--3e2d333d-0a34-4e40-bbdc-82b0ac22fb94", "sighting--513c03a2-a4f7-4ed5-a970-90f7cf53cbe7", "sighting--c40bdca6-edec-4145-8bb2-320065695c7e", "sighting--63fa4264-ab98-43f8-822f-824ca0f39068", "sighting--faa2899e-55e1-4a02-a5ce-ff91bed601d7", "sighting--1516431c-0aa8-44ad-8579-3c35d30c0d3e", "sighting--2f429470-897d-4a71-8fed-082a7f8094ad", "sighting--5ed6194e-d1c2-4d52-ba4a-964f1d5e2362", "sighting--8287fb16-3a90-48c1-bf45-3f9b5a7b73e3", "sighting--2f435de5-1cda-4c38-bff9-9804fafbfaf3", "sighting--1506bbc3-a3ea-44bf-9e9b-aab695e1fef4", "sighting--1c221e75-d731-4b31-97e4-8ff3661071e5", "sighting--38044354-e6d1-45b9-a7c7-f7b1103c6b1f", "sighting--b2cd1e61-72d1-48ea-94b7-edb931226117", "sighting--b8a0f091-2779-4a7f-9d86-5b71b3aebdc4", "sighting--f965860a-5493-42b2-b6a4-9253a1fa6a92", "sighting--97b471e1-078d-4baf-baae-570b0c17d5c1", "sighting--53453f01-21dc-4d87-8413-a28715e492b5", "sighting--4e2dfebe-4f78-4346-a832-8f2f36d76738", "sighting--d51d5e6b-8323-47fc-9fcb-962e6db013ac", "sighting--2fd69cf5-9d33-4d02-bc08-64b545071a67", "sighting--2a33b314-fb05-4281-9174-434655fe4fa0", "sighting--bda6108d-36d7-46d7-9520-3c549d7ed006", "sighting--e2ca7080-b4e0-42f5-89fc-2d7309919398", "sighting--250fab7b-53b3-4373-9185-c7810c40d701", "sighting--a025772e-1055-4fea-af4b-8e4ec790d7c9", "sighting--a596a076-1ecc-408c-ae3c-c1faa0aa66fd", "sighting--606fc680-0e86-49d8-9379-19039a2da2ec", "sighting--d87fce22-f24b-40b8-8bf3-301a8d07897c", "sighting--212fe131-109c-4b4b-af43-0e0861145d56", "sighting--09927ad2-b5b4-4925-a0ac-90c4b76488e8", "sighting--03d18237-40f8-46b8-a781-4286d98a9c94", "sighting--b1d9839c-5bc1-4dfa-95a2-bb966043ee16", "sighting--3efa3b05-bfe5-4220-b95b-d6b7a039da71", "sighting--f107726d-a2ad-4a5f-ab88-8f0671afc0ba", "sighting--bb200e3a-1f78-459c-9d8c-63f8cdfc347c", "sighting--f94dbc4f-8aaf-4748-a526-07f5e0fe8e16", "sighting--747c4cc2-68c1-413c-8e30-5039d04ca687", "sighting--d7e52ef6-ce0f-47f9-91c4-82d129dde77b", "sighting--35f2875d-4f62-4190-b1ca-47abcf40b77e", "sighting--cc90828f-8f32-48b6-9992-8ab18010b2d2", "sighting--3768485e-b666-48d6-b496-a3c5a311f066", "sighting--b33113db-cc55-44c9-9b32-fa333f22fc74", "sighting--9bbcf1e8-ae18-45b0-abc2-40ddfd15859c", "sighting--01b2a3ad-b939-4f90-8b6d-50993289d844", "sighting--3dc8592a-d9b0-4f26-93c2-ced8891cb87a", "sighting--fce4c9bb-7e7c-44cb-b3dd-6a67d3c5cf01", "sighting--fb0c4ba6-4b4d-4629-8f24-36ce63d413ba", "sighting--4383efa6-f815-40a5-bd21-7a4d83608f10", "sighting--49902dd4-3261-4010-9e1b-4ec516d7d4e0", "sighting--5db53eef-8a07-4571-b499-1b75c48a28d9", "sighting--61e795c9-bb20-4dfe-82cf-be3d406395cd", "sighting--9d7e6531-f7a3-4608-964d-dc8adb8ecc1a", "sighting--f30fe3e6-a6dd-462e-ad39-8386f6efb1ec", "sighting--0cbf280c-3710-4dcf-b5b6-453750c458c5", "sighting--70a4fd1e-5d04-4fcb-9907-78c0b8415f81", "sighting--a7ccfe70-15dc-4c2e-b393-0fbbaf28eddc", "sighting--edb4fd71-5425-4889-87d0-48c7b77d9192", "sighting--51153266-c314-47b8-926a-c585ccd7352f", "sighting--d47050ca-ed24-4299-a3d0-a7453eb54322", "sighting--6f794269-651a-43ad-88c0-70c0318f0ad2", "sighting--d55147b3-57b8-4296-a0f8-d4e6fedee3d7", "sighting--09829e6c-d095-4baf-948d-2a9ef6f7c45f", "sighting--e285391e-62c9-466c-91b0-16ac1eea1744", "sighting--be401cd2-104d-414a-b7d7-4b7d02ec3f6d", "sighting--e677466e-955b-4d62-8ddb-41b68fe83606", "sighting--87d44295-bae6-467b-9b71-8ef8c55a43c4", "sighting--8cb85be6-280b-46a2-8deb-64ce862e517a", "sighting--2703788e-411a-4f2b-b002-d24a980087cc", "sighting--1e957f65-858d-4263-909a-77d834bb3f50", "sighting--cc9c048a-ca4b-429a-882d-ef822584b04b", "sighting--e80739c3-e817-4959-be8c-5a19f0400dff", "sighting--8cb82762-7ee0-4292-991e-9d455891a0ca", "sighting--a2858478-0d63-497b-a9d5-6ea6863a961a", "sighting--2b21c059-e647-4aa1-bb1c-0df71387b78c", "sighting--642b82eb-ffbe-45d9-aad3-b2a482449e3e", "sighting--741bc8bf-e894-4f50-ba11-50013c8fa47b", "sighting--2ecf14ca-3bcd-41d4-8822-bc8808e9b638", "sighting--d3860fce-0fb7-4bf0-a9fc-64b04155d6b3", "sighting--abf65fd6-69c6-4b07-941d-21dd3b3918f0", "sighting--bb1ce754-f8fd-4298-b81a-f0df5ccc0d3d", "sighting--9c24276c-1e00-4cd7-8904-09a9e25f08de", "sighting--830ce9d3-4938-4c15-9fa3-1f1ec02ac652", "sighting--a5f2c685-1c74-4ca9-be9a-d938b958a4cf", "sighting--88434d37-56c0-4e1e-a7c1-2e75368477fa", "sighting--949a4e42-ac9a-4196-97c6-55e4fa5eb1c6", "sighting--9ffb749f-6bab-494f-b0fe-56da755804ba", "sighting--c2bc1c1e-e611-481d-94b1-394b19a4887d", "sighting--3da3b055-16b0-418e-a054-398585c3252a", "sighting--1fa4d6de-fe06-4501-8f59-53f9435d1231", "sighting--a927e7c6-45db-4dab-a9b0-d1c53603eb50", "sighting--80a1d99c-f63c-4221-a4af-bc4a163fe7a7", "sighting--fda19c05-bc9f-4c21-abee-ed813f778c09", "sighting--9544226a-b5c9-4be4-b07f-06fef0a9efbf", "sighting--39b28aa4-0935-4ae6-ac30-a5f8a37cb0e5", "sighting--eeb3a549-6aa1-43bb-939b-3a869603ce3a", "sighting--7893f665-4c29-431e-b40d-7096e76807a7", "sighting--cbf99067-c499-440e-b047-ffc4c88a93f6", "sighting--ddb0b829-6161-4fa7-8948-588219011c1b", "sighting--798a9a33-40c4-4c56-be8e-1d5832bbbdfc", "sighting--035b4a78-7c8e-4980-9283-026d4c89d27e", "sighting--271243f4-b750-4ecb-9ab8-9e1dd283575a", "sighting--48114df0-ccaf-4d02-b098-a33e5b842c9d", "sighting--89ed79be-87cc-479a-ac77-e765580e94a9", "sighting--b3b1f83a-1698-4c45-a16d-effc47608264", "sighting--3f847201-1580-4b2d-90fb-1f02c2e647a9", "sighting--4edb7dc4-dadc-49db-b1ff-f222e3fe6727", "sighting--f51bbfa0-055e-478b-b8b9-e65a322a4983", "sighting--e49f2885-1a11-43aa-a286-d2f64cfaa3ca", "sighting--5818bc7e-76ab-48e7-8a7d-5d0fcc7647b3", "sighting--fb3756f9-d23e-40da-b757-8138a9939e2d", "sighting--0c901899-bcbd-4974-a5a2-a4943e10196b", "sighting--9c4ddb18-24a5-40ff-9f99-1c40c9f5c609", "sighting--7feae29f-337d-45c9-9d1e-96f201e82dcf", "sighting--bf702b3f-1688-4607-932b-edbe756ee6cc", "sighting--59124ede-46b5-465f-a8fa-8393845b9e2c", "sighting--dc690bb4-4124-4b86-b66e-ee58d9c1285b", "sighting--6f38b33b-30f2-4dc6-b7b5-2d71e4438047", "sighting--1103b68d-a318-498f-af38-2ded4bb604f6", "sighting--14fdf7e0-96f0-4466-804f-d74c01c53dc7", "sighting--6269e226-455d-4d44-879d-1ac8d13c5740", "sighting--0e7ea895-5d8a-4911-b0e0-e51bae0c390d", "sighting--02874747-fad4-4cec-8176-a9fc64be306e", "sighting--24a9baa4-22e6-403c-800a-8c3839a6cd77", "sighting--4ef2d9b0-a725-4ba1-979f-56fd01af0437", "sighting--87866c4b-bcd9-46a2-84e4-427adbadc195", "sighting--6f904d59-2e93-41a5-8218-1a89fa87e6af", "sighting--dab081e2-ca6d-4377-99e9-2e76ccc70eda", "sighting--0620a316-9182-4905-9c2a-861f57459368", "sighting--a3a58f95-f085-4386-a0b8-1555e55ce329", "sighting--43e4137d-274f-4461-8317-1236ad3d8c01", "sighting--da3fec42-9d09-42b7-a717-438deae32703", "sighting--99df8649-9c08-4d8f-8bb8-548c5137dc26", "sighting--2ac4098b-8ece-45b4-855f-9531d8d745ea", "sighting--49cd9ae9-e4ec-4daa-8242-bd1d9c225fc6", "sighting--6fd3b14e-ef4a-461d-a460-fa3116c2e5a8", "sighting--1a527cad-c60c-4744-9f05-64ab32be2438", "sighting--d3915280-d17b-4f60-9667-1c24629b3c61", "sighting--592909d1-4983-4d51-957f-b1c92632ea6c", "sighting--3c00ceda-6224-4a38-9c6d-5533326dac9d", "sighting--e5cb2f62-5258-4fb8-9c77-cc6829a2a0c0", "sighting--aac74077-2f0f-47be-a287-1a887e7691a9", "sighting--f1a44be0-e06b-4a5d-9390-76a068224466", "sighting--29a5c3e9-11b7-4c25-add3-b62ac02ada72", "sighting--b8130fd0-ef8f-47ec-a012-f388fd859423", "sighting--d5bdb431-a77f-46fd-90f5-38b93cc02cfa", "sighting--2d287138-1acd-45bf-88b5-1062c213615f", "sighting--f0d34ed0-62db-4870-b11e-b4ff724302e6", "sighting--e77c0184-7b50-4d9c-93dd-c5977c47579e", "sighting--9b609636-3fe8-414d-897a-5967d02b5086", "sighting--b2f29ea7-7a9e-42a2-b5d7-1a1674eda1de", "sighting--d6ef31ae-44a4-4bef-9775-8dde06047031", "sighting--2b0ed981-dd3c-4d0f-ad9f-f27d49230ca2", "sighting--12b7c655-4dd0-4ffb-bc33-44218fe1d3a2", "sighting--279685ed-6233-48d6-84af-d9dad0755fa6", "sighting--3da1f0ae-fc7f-4303-b476-828997f8e805", "sighting--7236d67a-0e9d-4ccf-ab76-62204284e1e8", "sighting--85586a05-3d1a-49b2-ad0d-5f2a64a68215", "sighting--4ed8e738-86f1-428c-8037-caaeeda27c88", "sighting--471bd54d-9711-4876-94fe-ab644a3fdef7", "sighting--f652af2c-7ab4-48e7-9d7c-cb1837cfaba4", "sighting--98d49036-6420-4c1a-9bad-d692871a41b5", "sighting--a53c7a45-d773-4b0d-8a22-428692dcf85b", "sighting--2cc4acb9-0ca1-4a33-a02d-3d7177340547", "sighting--5f9e689c-1545-4ef9-8c7a-3a7ea1844726", "sighting--1029ab48-23f9-427d-aadb-d9e45cbc54b5", "sighting--0cf043f9-bd84-4ef8-be5d-0c6cbe7822a4", "sighting--9b037bf5-0b53-4cc9-83ec-f34883468847", "sighting--88f0462d-6af2-40e3-b123-f8f0b9cab0f1", "sighting--f955f199-604a-46b9-a72e-773ffa240271", "sighting--53cdb09c-a079-41ce-8d2d-564389cae99d", "sighting--f4cf7e08-e122-4c70-81c1-f4e7b8232292", "sighting--c3d05da0-8064-4f41-82f0-c96f3e3d8327", "sighting--d388b419-9739-4493-9dcd-f76fb1c00f0a", "sighting--7b45cb14-8408-48b6-a404-ef7fdf830272", "sighting--e943ed91-c275-4cb1-a874-8a75a6ba88fe", "sighting--3c4f0131-22f1-4511-9b40-ea4e53599488", "sighting--d68750ec-c30d-46ea-8c06-1834cac00fdc", "sighting--4d4e1e13-1045-4cfa-aa28-85c1c332d5a7", "sighting--08010556-7525-4a5a-8d27-c3407a526d89", "sighting--d10e0062-8c6c-4c62-9da4-b4397e71302c", "sighting--bfb4ccb2-550a-4a29-ba16-90b652d7262d", "sighting--6f76a1cc-e057-4f16-ae0a-48a5602dad70", "sighting--13a9b5ca-94fa-4aef-833a-2cd112993c5a", "sighting--b31c4e03-e8b3-42e3-a373-b78c85e46607", "sighting--9b919c12-68ad-4389-8d45-9723a3286071", "sighting--a810a234-20af-4d1c-b7c0-70b7648016f1", "sighting--2c191e24-86b4-40c6-89ac-7d0754fde81c", "sighting--063fb022-617c-4337-a682-43dd922aac0e", "sighting--a614a6f7-63f5-430e-9dfd-b07cb3601718", "sighting--43287404-ff7c-40ff-a641-14ddddca2461", "sighting--ca1db946-bcfc-4461-a97b-fb8adb185065", "sighting--2945ffed-b785-415b-9d0b-b9e902f1edee", "sighting--e3a05775-7fa6-43af-a2f4-1eed2992a6d5", "sighting--7512fa13-cc3a-4e1a-8389-8dee81bddd94", "sighting--d6291df1-5e56-488b-926f-6353c7bfcc52", "sighting--3452a20c-d4b0-47ce-942c-d5a6d5d3779b", "sighting--c50f66af-8c72-4b2c-8e82-9a32b5c8bdc0", "sighting--27437ae3-480c-4c46-9477-3f38b4195267", "sighting--cc947740-40fc-4e59-9d55-cc4b37be1f1d", "sighting--307e55eb-108b-41ae-b13d-fecf7a8c666d", "sighting--04e3c6df-4756-498e-ab78-1a830d8fd4cf", "sighting--0da6cab2-5817-4b52-a1bf-4968bb641926", "sighting--c8f5fb5e-3390-47d0-a907-701ca211c819", "sighting--faece794-6ff8-4bde-9d3d-0bc626badb38", "sighting--a6eba453-dc05-4513-aa13-5c721ec0d453", "sighting--e4b49cd4-1a83-4f8b-88f7-5a3fcb2b7277", "sighting--b8ad5a87-6749-4b7c-8896-79de6afec3c3", "sighting--e890a55d-e9b7-4d95-ab18-1fbd91b048e2", "sighting--f82c1868-3f84-47ac-8422-dc33a90bdf5f", "sighting--eb8bc718-ca05-4ced-981b-161536a19ac8", "sighting--60c8c79b-eb18-4439-9ba7-960d12ed55de", "sighting--3275d705-1075-4447-8d63-9928f1f2e68b", "sighting--bd866566-40e7-44c6-beab-3a7c77f9f089", "sighting--a358d376-71b5-4013-b489-2a81e3250dae", "sighting--4fdb957d-23ac-4afc-b7aa-af1b01c4474b", "sighting--452bc496-db8c-4579-9291-80fe032cc20b", "sighting--5039a60f-45e2-4a3b-8c9c-dc202e3bdcee", "sighting--815cf526-6a16-4ba0-bab3-0f7052f07c0b", "sighting--94bd4582-4c05-4a9a-9bbc-4ba32624b880", "sighting--a44df8f8-f5f8-42c1-a60b-9dbb639ec12b", "sighting--44d83270-3188-4e06-bb3c-3f288c340df7", "sighting--e4033896-c238-49d5-938a-75f1654e50fd", "sighting--4760d8b4-9557-4796-8881-577b9aaa5b53", "sighting--7613035d-47aa-4811-88c3-35fcdeda32cc", "sighting--18497359-ad3d-4577-9312-cc7712cc5f66", "sighting--d125e91e-490c-44cc-817f-01e0bb012802", "sighting--02dac06f-64dd-4952-bdc7-1f3e1fb13f52", "sighting--917438b1-570c-4126-944a-2b30320a6347", "sighting--93ac7206-afa5-435c-82c4-387c801f7bd5", "sighting--5987b643-cd96-469a-b5a4-74926933ae03", "sighting--28cbd3d7-d3cb-48a1-a448-0ef5eec6c792", "sighting--aae12e1b-8801-4efd-ba89-da9aa4b24625", "sighting--c5cd2a43-d562-45cf-8129-55e1092f496b", "sighting--4f10be64-5cec-4269-a2d4-22829e1c007d", "sighting--b4db1032-956c-439f-bb7b-8e23ef3b1014", "sighting--9485e2bb-d728-4fdc-91d4-5323ca352db3", "sighting--76cbc56d-e707-478d-9918-7deb4d31e912", "sighting--e0aa7c27-a213-46f8-96b1-f1c62374de24", "sighting--cdcafde5-c4e5-4c63-bd55-76cbbf5c13e2", "sighting--7d20356a-8528-4c45-907d-8a1c79e93024", "sighting--494200f5-e3ac-4f1b-ae8b-0233786a9c44", "sighting--b605c753-8a44-4698-851c-62070b1d1fc3", "sighting--8ff768f2-54fb-4c39-913a-571dfea2f3e4", "sighting--dff9f889-a8a4-4741-bcfb-3d3a09c52ef3", "sighting--3eb466ad-e264-47cc-a91a-a9f362e721d2", "sighting--5a48cd50-c998-4bcc-ae96-67522453aa34", "sighting--6d7f9d8c-c130-4930-b751-53da50cdbb58", "sighting--9e1ddf1b-1995-4063-9746-027c3ff12fc7", "sighting--427cf5d9-2240-486a-ab2a-33db9133615c", "sighting--580ce84a-b403-432e-a9a6-977bc1e46eb5", "sighting--0ece2bd3-bfc3-411a-9ff2-842e9c283644", "sighting--127801ee-e926-47a2-bf4d-87dedd9a910d", "sighting--a2a7b1b8-b4bc-47d4-9fc9-ee8ac2282a19", "sighting--b2f2a485-3968-44a7-827c-edf3f534f737", "sighting--b0019ab3-b381-48eb-905d-53e2d8ef2d31", "sighting--514cda49-3c74-4630-9069-b91554d8b23b", "sighting--f1feb351-b4a7-4364-ba10-2cbde4b4f938", "sighting--6cb5fa21-75a5-40a9-b4d3-dc723aaf8b63", "sighting--84973e16-96ff-4eb5-b873-59d743e88ce4", "sighting--adfef855-fa89-4a04-91ea-609e7306a1d0", "sighting--03b32bf1-a914-4510-8948-fda15fac97ab", "sighting--e0e96646-8a68-42be-bfd6-951abb663dd9", "sighting--2a36e3db-4360-4245-9570-54b3e24027e5", "sighting--5f590dcd-84c1-4f62-bff8-487b6c80bb92", "sighting--58268c4c-cd50-47b4-97f4-050fdfa02bb5", "sighting--efd805af-1789-41f3-8688-dd1c8081896c", "sighting--a87b394f-d4bc-4d36-aa98-0b417c879866", "sighting--0512a18e-7c26-4dc6-97c5-b868ddb80825", "sighting--1b2e8108-01d8-470e-b79d-95cd14962c97", "sighting--57624998-49bb-4701-9448-7005f1c11e8f", "sighting--183d0447-28ad-4beb-b98f-d2bd725b8853", "sighting--f68e7c84-0e64-4e66-8174-aaf4a5fd6b61", "sighting--986f9271-1e2d-4a65-a585-e444f880f2b5", "sighting--10f49b39-4634-4392-8ea1-123201e46612", "sighting--2670f700-9871-46b6-a5d1-b9cb4457a0df", "sighting--6c3ff281-3ef6-4579-a961-21d3afc84e10", "sighting--49d1458b-3e31-48ed-bb4c-715eef7a7e91", "sighting--0ce5aba0-e655-4af0-be17-38f0e7f8e22a", "sighting--aee7f502-e7d0-428d-aded-c5b9efdd429b", "sighting--17bdb265-598f-48d1-9de7-8867ff494830", "sighting--6b94a96d-4db1-4d4a-a07a-89f7cea3ea35", "sighting--cb9976f4-ca57-485c-9b29-809692716d36", "sighting--2091d597-973a-4df7-a515-b2d1e29c540c", "sighting--1a6620dc-2e21-45e6-aaa1-fc315e34581c", "sighting--0d816177-ada6-469f-a3fc-b3818e601eab", "sighting--8d6cc592-4577-474a-883f-76c3119dfeec", "sighting--1eac184e-6f87-470f-a25e-5049d26d403b", "sighting--0878522c-503e-44bd-8b40-eaee240d8dff", "sighting--6cbf9a17-358b-4dc9-967a-362c40e6ba46", "sighting--d495b2ec-e8e3-466d-be6d-19d854ffe8cb", "sighting--a11523ff-f750-48af-9852-28bab9a7414d", "sighting--c36dd3d4-47b2-419d-b916-69e139efab7b", "sighting--38dc3ea6-da16-4851-ad9b-470ca8fe556c", "sighting--c21679f1-3d0f-4986-bdd9-1c8e042a37b0", "sighting--c4ac9772-cbd7-4002-9e47-a74acca671d5", "sighting--547cbf73-a423-4687-91db-8526503844ce", "sighting--74b34e69-9ebe-4cd7-8bdb-b17ebb8fb005", "sighting--fe882ee5-8cba-4c0c-9dc9-69751c64705b", "sighting--b7774f7a-1dff-4027-a307-869eb153d32c", "sighting--8bda68dd-748a-4128-bb52-69d17dbdfebd", "sighting--97ec743b-847a-4ab8-ba78-f577fd02e039", "sighting--5540bece-3811-42e0-9d3c-7556b84816af", "sighting--6655d8a6-2d48-488e-84ff-7348837d1f28", "sighting--2403de13-7618-40e0-9aa6-409efeccfda2", "sighting--4fe01313-0fd6-49e7-a3ac-2a15a8923aa0", "sighting--b06c43fe-3acb-4b3e-ab45-214a2ab6b0a2", "sighting--2af98651-476a-4440-8811-7f32c6ac2935", "sighting--6324935c-f1db-478c-b0c8-e04be72cc445", "sighting--8a66fe1e-f658-43f1-8004-c87034f4fc8f", "sighting--d7aa1cb8-65dc-476a-845f-a1989f1ea6d6", "sighting--9666831f-ef6d-47d6-9d34-a52ec13793b7", "sighting--1f8ef560-4f42-45fa-8810-ca463b1d159f", "sighting--9c56174d-32b0-477f-a602-e13e204c5c52", "sighting--73a4de7c-b564-4a5b-8ba5-eccf412b7963", "sighting--c27c409b-f204-4322-94fd-425b5ada4bdd", "sighting--f45f00ea-3c27-4929-adf8-8e78b28d323b", "sighting--6b8b2697-eae8-4be5-a31d-749481779f16", "sighting--57227435-0488-4ccc-b50b-e59912766096", "sighting--bf8ce00a-cca2-4a38-bcd3-4c490223f8a5", "sighting--16b7ac15-78e9-4978-94d1-a18482c29f5c", "sighting--8a95a894-5c0d-4823-93da-ba32627e88b8", "sighting--29bded02-de63-4233-ba0f-87d51dbc975a", "sighting--d8fe2b17-7768-4c38-8a0b-70e7feb290ae", "sighting--aec16048-1599-48bf-9fc1-c94aa6880b4d", "sighting--c86118ea-a054-4b5b-93de-f561a3b57e94", "sighting--9148cf68-ea25-4d22-b143-a9d4fcc339cd", "sighting--5af6ce36-3b31-431f-b9bc-bbb26201bb43", "sighting--3da8bdde-6a53-4953-a572-769af65e9d51", "sighting--1d8ff81c-50ba-4ed7-943c-eb7dd729fe9c", "sighting--eba90715-2f8e-4495-80c2-1fca15448ebb", "sighting--67cf618b-3aa2-40ce-8264-f12b4032621b", "sighting--99d8dce1-e27f-47ce-a069-5062f8b9636c", "sighting--b4a8d030-39c5-418a-8560-dd971e864ed7", "sighting--3de02e1d-0a48-40ac-91e9-8063bf85b892", "sighting--3ef915ad-9e84-4681-a119-40914e2b6150", "sighting--8e1ff251-4c61-4eb3-8828-eaa0d7b472ff", "sighting--0c8d75eb-1daa-4744-96b0-5d91e1cff05d", "sighting--e7a78613-9998-4a6b-b47b-dfc703e0a158", "sighting--846df82d-931f-4e74-a3ba-b6cab8e1316d", "sighting--6ea77a0b-04fa-4235-b871-8674e08e3350", "sighting--a04128a6-09f2-44b8-b4cf-27eb08697219", "sighting--c7d44464-b342-4248-80c6-aa80cb39bd81", "sighting--f11f125f-4799-4a98-b9a7-207b2284347b", "sighting--1e3dd6cb-4778-49f4-90da-ad1cfa979552", "sighting--1b4b2275-7983-42b4-981e-f9badffef310", "sighting--00cb9d12-556a-48b6-8087-7fc05cce7b52", "sighting--a45fcd11-4f3e-4df5-8134-d2a1dee3ec52", "sighting--3cd92ef7-fbdb-42fd-9486-a0a3054692a6", "sighting--bdd530bf-7dc0-4931-8cd2-f34e182fd037", "sighting--4b1d1892-bafe-4d21-8646-f42338de03a4", "sighting--685fa5aa-1a48-4d1a-b76c-2be0a5a1d2da", "sighting--4c1141e3-16b8-4904-b59a-e7cfca7393cd", "sighting--da9c57ac-a7db-4142-b795-03f71e2a8ab2", "sighting--6e949f61-396e-49d9-8cab-158833d2dd05", "sighting--5ee3d2bb-7c31-4a65-8278-4c8264bdab37", "sighting--9bafb09e-6cbf-4fa2-b8ce-457903e0d70f", "sighting--ee28809e-881e-4f32-9b0c-c86924c2056b", "sighting--c3f23945-631e-4003-bc82-577ce55df6fc", "sighting--c462b451-7867-4018-a40b-3c5d8e7b7bcb", "sighting--4205f098-1262-4dbe-98e8-6f0315753b82", "sighting--637b176f-e1ad-4616-957b-a062ea49f481", "sighting--7fb4828b-0bf0-4ce0-b1db-a2378a52e6b5", "sighting--60f2d821-50d6-420d-91c3-6b8d2f9adbfa", "sighting--5ac7a444-aeef-4882-8320-ce561b89d7bc", "sighting--415a3036-e188-4552-8ad9-67a67bb7fb53", "sighting--f66e6582-4563-40f7-b8c1-0451e281a26b", "sighting--dc067bc0-4345-4d9b-88b4-2694dd047f82", "sighting--602dc436-1293-41c1-bb67-6bb732b30bb2", "sighting--4fdf01a9-4588-41e8-85a4-08cb022573c0", "sighting--2e70da43-4b02-4382-85b1-7855861b5598", "sighting--9f32f8de-90d1-44f9-b5f8-33118bf38df9", "sighting--1f2d9ade-ab66-415c-8dd3-9a7be93752d5", "sighting--06d26254-3aa7-45ad-9ed4-4f8c1921f3fe", "sighting--46f7dc11-2a3f-40b0-beb7-98175feeaaaa", "sighting--2144d8e4-9537-4e6b-8282-6bc62be33cf7", "sighting--fe3da57e-2a0f-45a9-a46e-e0f3b787a111", "sighting--f94c22f8-4e7d-443b-a994-fc897912f1f4", "sighting--adcc7710-def5-4b78-8b93-56f6233f69d6", "sighting--794ca55b-8ada-474b-a292-7d82d2d0ba76", "sighting--418121bf-08d6-4a4c-af53-5d47ef595ea3", "sighting--14b9954a-83e2-465d-a0f3-444b0a785c17", "sighting--e20a5b96-8733-49ef-873c-842312a92cf0", "sighting--db9c54bd-ba7f-4bf7-980f-4e38a9b4b27d", "sighting--499d244f-cc3b-467b-b610-c737b9e5d98f", "sighting--343e13ee-32a8-4759-892f-d50e9176547d", "sighting--13398932-aade-4cd9-b7c3-9ead163815df", "sighting--6e4c602f-d5a9-458a-befb-7df91be22e78", "sighting--f3c45706-ab78-4eb7-b285-9f60f0a2805b", "sighting--4c1c44c0-e030-495c-9b52-97c1973a056b", "sighting--03f35db6-f47e-4efd-8b6c-384e75079366", "sighting--3d7ae353-ed3a-4509-9fbe-b3cbf1ae2b5e", "sighting--1cde95d4-fb33-4491-bd8e-a56e03129a78", "sighting--cd579e2b-d954-4b15-b02e-17b7d54af430", "sighting--fd76b3af-196b-480a-a015-2931f8e3fc5f", "sighting--2e9d03b9-c93e-4446-afb7-1a3925500f0a", "sighting--b09115c2-b012-4774-8615-09632799f5bf", "sighting--6d20be4a-6d9e-42ab-8616-f2d8c8720ce4", "sighting--c003f2be-384f-400b-86e9-c11ca52ce5ca", "sighting--660a0ffe-421c-411c-b1bf-e51e602427c4", "sighting--0fa91eb9-b8aa-4821-b8d4-d6bac4216c33", "sighting--e7f7d19d-5536-4e55-a008-0e1eb92f7145", "sighting--c0f3dc76-d24b-4868-9ede-19bcde3724e1", "sighting--58ddacdb-d4cf-4d07-a010-52c72ac429c5", "sighting--203b1e83-5e32-4822-a399-db8c48dc6366", "sighting--570a3afa-dbcf-4789-89de-199f03b05ed3", "sighting--17657ac5-0d66-4340-9b83-e30398d2c81c", "sighting--c41a4f31-0e1d-400d-bdb1-277270b45636", "sighting--86b2c975-a54a-42f3-8c3f-ba7b82af1acc", "sighting--423c3ee9-532a-4c85-91ae-dbe997284441", "sighting--96056444-dab5-4531-8cf0-f99255908a9e", "sighting--29af5023-8bc6-48d1-aac7-102a33a4da7f", "sighting--d2667017-490d-40fc-828f-2b4adaff2c3d", "sighting--bd81dee3-619f-4df3-b0b5-eea25aaa172d", "sighting--0969138d-9a4b-4d90-9ee6-d234702fd38b", "sighting--6c9f91f1-12e4-45f7-b71f-9c4f346f6f96", "sighting--9bc46fa4-da94-4bf0-9633-b77a1c16c7ec", "sighting--159dd352-41af-4436-bdc1-865c1bf967b1", "sighting--c4285e4a-acac-432b-9e17-cebbae99f150", "sighting--914f315a-03f2-4a4b-aaf9-fd3f7e2c1bcb", "sighting--3deb0603-fa66-417f-971d-0831014346d0", "sighting--535ce85e-535e-4936-a68a-ceb2890608b7", "sighting--1fa51e73-f0e6-4b3e-ab18-8e3265969fca", "sighting--68b0a3f1-4bae-4f45-a003-fcb4c7e8935b", "sighting--e2d1c227-bb17-42e1-8000-f1a0ee683495", "sighting--1f27f6f0-4aa2-40fc-bee7-34e0618b787e", "sighting--c6369f02-28ef-4a68-aa23-845f6661c784", "sighting--aa22687d-9283-4ce9-8e43-d1f164dcc57b", "sighting--c9a4218d-f668-428e-b6b3-9c0ce61d0d97", "sighting--682d6eaf-4f3c-4cd5-80ed-a3e5614b62e7", "sighting--5cc541ba-a903-4a9b-8707-a0d5f68f7ef1", "sighting--6aac3f24-b87f-425e-8df2-dc19b22742a7", "sighting--a7d80c47-40ea-43c1-8c5e-69434e90c676", "sighting--f41c58d3-db03-4206-b8fe-3ff8d9680ee9", "sighting--c35db4b9-54fe-42de-8d6d-8dced3fcd37f", "sighting--23d5ae77-4e07-4c58-9b89-5b4fb41abe2a", "sighting--ab0bb9c5-f438-44cb-8eca-21d8477c9dfb", "sighting--00e1c567-7cd4-4984-ac4d-292ad51a2cf8", "sighting--b2bac1d8-0ced-4886-8709-724c9e497b58", "sighting--067782e5-de9d-4574-829f-c4a6f60fe436", "sighting--3f9c7d1b-9431-43e0-b3a2-3a1e27d7139f", "sighting--50139125-e0c6-436e-943c-c95334806cae", "sighting--d8a87bcb-28da-4fba-942a-0645e692503b", "sighting--39acdb62-a39f-4de2-b228-d060d00c5583", "sighting--7597fd9d-b2a8-426e-9a33-5e2c262b25fb", "sighting--5c33e117-1c6a-4ff0-8ffd-be16b41d4ddf", "sighting--8e7ddfe6-e18d-422d-83e0-216ba2b5fd5f", "sighting--61a6f668-e7b6-412c-8bc4-d3811d18baaa", "sighting--67bb7799-5798-4fad-8e92-a7f0e2dfb71d", "sighting--9830dbcb-419a-41ee-ba40-27da35480f41", "sighting--f8609e77-8e82-4ca4-a6d0-c82213212a5c", "sighting--4c01a160-52c2-41bb-a632-e905155f78da", "sighting--0a19c543-0020-4424-9dc6-630f704dbede", "sighting--45cc6b71-0499-445b-9cf3-0c8566c161be", "sighting--86f8390d-af27-49a8-b248-3b20dc4e80fe", "sighting--fcc9f9a0-8d5e-41a9-ae22-be180e028fe5", "sighting--692532d7-0e3e-4221-9bf7-5c67f0f522ed", "sighting--ea97223a-b4bc-4332-b16e-fd1230da609b", "sighting--b69631b2-5b02-4283-97b8-3336a160ae44", "sighting--31320279-5626-4ea1-ac42-06c9b3318d55", "sighting--b9cf90c6-d55c-4927-bf84-54d293289b85", "sighting--6ae21bf6-9068-48ea-8990-9cf081431629", "sighting--693ad9b1-9283-4956-a4d1-78718fcceb47", "sighting--13099410-8129-4c74-990b-817fea51545b", "sighting--1a9f6652-6535-4b94-a848-ee7fb4ccf50a", "sighting--2193edef-4436-4f76-8a26-5dd1cfbcca7e", "sighting--fe9a6d1d-d42c-4512-acb4-9b757aae52e0", "sighting--cefabfd0-9927-44db-a031-9cc901c28983", "sighting--a9dd89f6-e976-42ab-863a-755436081844", "sighting--f419ebb4-e90a-4b1f-a047-20894f93480f", "sighting--52f874c0-b9bb-4475-a194-4d75ede7e62a", "sighting--0881424f-526f-4bd8-af53-891f655eaaf9", "sighting--61c5e89b-5a7d-498f-bc8a-fbc5cbb48581", "sighting--782acf0f-57f5-4e32-8424-18d648cd3844", "sighting--814e77bd-d890-46a8-880d-6c44c659dd1a", "sighting--038c050b-5c7c-411c-9d62-23e5af28d0c1", "sighting--d9be1ecf-a8dc-4576-af1b-a54dbd44c4bc", "sighting--c90235df-19fc-46b9-8205-a425c4740b6e", "sighting--0f068cc4-67a1-4c8e-a15e-b419e80eae76", "sighting--5bfbe987-b496-4785-a9bb-989b56619201", "sighting--f11421c8-3715-488a-83cd-271ddcc93b2b", "sighting--bd902d2f-24b5-4bd5-a8fa-aae67904b208", "sighting--a6f91d29-e43f-40f3-b520-625d0f788394", "sighting--c931eb21-b3b7-4d34-b93f-6f3195e84418", "sighting--2e4e41f6-3cd5-4ca1-8144-bfc86b228dab", "sighting--716f629b-6cfe-47ff-bf61-131e631dbfdb", "sighting--8482731f-b833-41f2-b177-b318fe57f713", "sighting--92b90bc7-139e-427c-9de7-9894396a33df", "sighting--aea9f0ea-9239-4234-a78f-ec59f1ffe63f", "sighting--a055c154-2928-4293-b5ba-e339e8d73f77", "sighting--6d7239ba-9438-402d-8c47-ffb427c19650", "sighting--6bdcaf6c-1e8f-4fc8-a952-fed032c5eaef", "sighting--ed24995c-0f2b-42d5-b4e2-b68c7adad4f1", "sighting--630ceec5-8c9c-4a27-9cc3-780985996e8e", "sighting--fba6e6b0-96b6-48f7-90b9-1bb22598764b", "sighting--d039b4c9-8d57-4a73-88f9-182c4145677f", "sighting--f9fa8acd-bdfc-428a-9f4b-736199bf79c6", "sighting--028e3e86-8eeb-422b-a962-f36208744ed8", "sighting--a09ded14-90c2-45ec-bee0-89693d58951b", "sighting--b594b40b-8836-4176-ad66-6376da2546fb", "sighting--d564c9f4-bac5-4156-9966-e7f295a628f3", "sighting--db6bbe2a-73a8-4659-8f7a-41091b1070ac", "sighting--e6cf0d3a-4dcf-4e50-ba83-de9133aac397", "sighting--c4aa76af-3260-4674-8f5e-e2a6af6f42a6", "sighting--6c3a1516-af2d-4421-b576-6b00ed83ae95", "sighting--d31039a3-e2d7-4778-a6f1-d51edec36c02", "sighting--0781723c-1acf-453f-99c9-13bee6cc5d0c", "sighting--bf56fc83-dd83-4c97-825e-60a8928c1fbc", "sighting--2701b924-8413-45c1-a516-3c55e60d29e5", "sighting--ba493740-d149-4804-a2f4-028df2920d80", "sighting--59c89e2c-7b8d-438d-bb1a-4d2f832fdde5", "sighting--951171f3-2f88-492b-bae1-bbae3f27dc5e", "sighting--9307a92c-409a-4e6a-a75e-54b79554ab8b", "sighting--d49b2610-fd27-4823-9862-b1f7bcf2ca8f", "sighting--47aefadc-58c9-4308-b059-7e83aa8451c3", "sighting--9846cd46-2cad-4795-9a4d-4974dbac501c", "sighting--e1ccab38-cafd-4db7-897f-c5cba78d86a1", "sighting--c1aa579a-33bd-47d6-83e0-c1d16a81ab71", "sighting--c7ca9053-d34a-4b09-866d-04943d87c462", "sighting--e389443a-be58-45bb-84d2-6a7555b15cf5", "sighting--e799cdae-8124-40f9-9d3e-d91d91bdfbcc", "sighting--0f03f1c7-324b-46bc-bc2a-35b278e3979f", "sighting--ded0d493-f6b0-425e-9d0f-683a56cc4535", "sighting--991b43d9-8b3c-43e5-bb80-6c77fe381648", "sighting--de332114-b8be-425d-9981-aca31089eaf4", "sighting--9d55fcd3-71be-4d2a-94c8-25d036020fe8", "sighting--56ba2616-2572-406e-ac95-8ad9537dc03b", "sighting--a7ee1be7-54a4-4a77-ae49-e6c5bb9fd5ed", "sighting--0790dd38-a937-4c0f-acfe-39a7ea83434d", "sighting--6591e6a2-ac49-4908-b264-a423cee4debf", "sighting--d5379224-e21a-4b8e-ac90-f77cb0c61e8d", "sighting--93a6120e-5281-42f4-90e4-f090b30c1389", "sighting--619f6f4c-2247-4bf9-a7f7-c5caff9930f9", "sighting--68b5d47b-be78-461d-bf9b-f620877d6ec3", "sighting--9e5a4b23-7356-4f17-9941-c7c754c3d3a1", "sighting--fc06b8d1-a7e3-4c9a-b9a4-a1b86d366705", "sighting--eaa0db98-169c-4368-96bc-bbd895904d83", "sighting--cb8564ac-2520-4501-b5f3-158b58cbc0d0", "sighting--88da420e-3410-4547-9441-f0e74aaa737b", "sighting--bfb9536a-9584-4437-84e9-5319e124be85", "sighting--6be082ca-dfdd-477f-bb93-8d70d459bc8d", "sighting--09489a1b-1b0c-4526-9bd8-6c50f9b97d0c", "sighting--59b73dc8-e415-4328-bef6-d871b7072424", "sighting--ac12f974-7acc-4e36-a4bc-9b9af90ef9f6", "sighting--73f1bd18-a6d2-4323-92f9-739e63038334", "sighting--2f083d0f-7dfa-43c0-bec8-f2f0680c8662", "sighting--75a68e4a-54ed-47b1-85d1-16cc07f11354", "sighting--9779fdb5-493f-47e2-b047-4098481b4c32", "sighting--7e903348-ebe2-4cad-93b1-1e5225335076", "sighting--af90997b-3f11-4f83-a003-b388776676c4", "sighting--b29aadb3-4285-44b6-99a6-5f08598566c4", "sighting--35bb0e1e-9d82-497e-877f-a341e4697047", "sighting--738ad26d-1a04-4b54-a13b-f2400d7545b2", "sighting--28207a3b-d55e-48d2-8562-4a9315e890bc", "sighting--70506804-be7d-4e9d-acad-806d925316e4", "sighting--7dc12007-3ddd-4a15-8b87-963810cd2f0c", "sighting--dfc1863d-015f-45ea-8ea0-b799fbf2f335", "sighting--f6b8503f-120c-48b6-8f2e-9dd7770c88ff", "sighting--c85542b0-fa2c-496b-98db-0a927704a976", "sighting--7f1a2d6c-45e3-4925-8587-b4f5cff5d036", "sighting--1c9585d2-ac4f-4396-ac1a-3b323ad72f88", "sighting--45d6a30f-455e-4277-83ae-108dd0838f6c", "sighting--e22ae8f1-7a00-49c6-8306-14afcb6137d3", "sighting--8365a27c-2491-4c35-85e1-e2572230f133", "sighting--cb08aa5d-b00c-441e-a16e-f215e1a15685", "sighting--0914c370-1ec9-45ab-bf45-fbb1b9698f4a", "sighting--7cef090b-3c71-4454-ba12-e09c9af8bad3", "sighting--64f8f706-0e4e-4aca-91ce-3ab884e87b89", "sighting--0b4a0f4d-e9b2-4547-aada-ac5aa6d0ad0b", "sighting--1909656e-3edc-446b-8553-647862875bec", "sighting--7b20493b-3cb8-473f-8d09-b4828d430439", "sighting--ea24b633-5281-45c4-9e52-894ee5c9f3bd", "sighting--2d93b98a-b5b2-499f-b06f-5f691099d89c", "sighting--473ad5e8-298b-4358-b81b-b8a5632e4d61", "sighting--66fc3e01-f6bf-4132-ba1a-d1e76bd76fa4", "sighting--678af88c-40bf-4454-8784-f1cdee3d8368", "sighting--56a207d2-5bbf-4d96-8290-81ec4573ed94", "sighting--50f6b22e-7a79-41e3-83c9-bad6e56f7641", "sighting--1e8c53ce-eceb-40e3-b434-a2dc6788153e", "sighting--d6b5ff9b-690a-4b8e-a194-9b5efac00b5b", "sighting--e5c08996-1ade-45b5-8201-243ace4ed9a1", "sighting--ebaea454-791a-4884-82a6-67220ca23813", "sighting--6043e066-3a6c-4b70-bf33-b9f550cced0d", "sighting--5816c328-77a0-48dc-8ccb-606259256f9b", "sighting--4d4a16e7-6f2e-4b23-b3f9-04768380c210", "sighting--9d7dd0d0-f05a-4c7f-9210-f04d03c03e09", "sighting--1ff52e27-9daf-4727-bc37-7fa2a10be82d", "sighting--de0de385-41e0-4a5c-b3db-2b426969ddb2", "sighting--c080999c-4f79-4c6e-bc26-efccdbf3d939", "sighting--5acf8448-0e64-4073-a83e-96ca7a77946f", "sighting--fc1960c6-96f1-424f-acad-41adbf27f22b", "sighting--5491ba87-7659-49dc-b5a6-042756ba3d9a", "sighting--40b1a3da-fd19-4679-b12e-b6e83568a2f6", "sighting--4bb789df-66ce-42a5-a800-d5bedac0fe6a", "sighting--371ff274-7eb7-42e8-9bb0-dd3a360386e5", "sighting--4f4b6e1e-5f68-4f0d-b99b-0c0c1e691721", "sighting--a759a5e3-3f6e-4e50-b68e-8b42a14c4a25", "sighting--11fb2261-e20c-4a5f-9a8a-2824af25cd5b", "sighting--7e0bb4f4-eca8-464c-a38b-b28ad62668ad", "sighting--98a18eb7-78c1-466b-8b8f-689eff4fa2b6", "sighting--a0cbb8af-2502-44a3-8117-d383f46896e6", "sighting--43a162c4-ec46-408f-bb73-3a41dfae264b", "sighting--f8dbda9c-7915-49b7-9312-52268b065331", "sighting--ef0212fb-0802-4ed5-af40-96c0b9583f00", "sighting--0357422f-c4c7-430a-a00f-b938885e4de0", "sighting--d2c77b28-0589-488b-861c-583272da1bac", "sighting--e04964ab-1a2b-447a-b256-1e48483f0259", "sighting--48977b8e-ff8d-4980-82ba-1875a9ec620e", "sighting--1de30445-7972-48f6-9cf1-1d947744ab67", "sighting--17987cdb-87a3-4ccd-90c4-d0e163155f10", "sighting--dd3b34ef-1f87-48f3-95d8-5e451c160d4a", "sighting--a3d02288-a4c8-4dce-aa73-d3f15d654ba1", "sighting--75fa345c-bcf9-4c0e-8aea-c6f317c38146", "sighting--ee6bfef8-f03f-47d0-bba1-ca0e5c292c54", "sighting--f88fce69-ce70-4ab9-afaf-d7cbb730f5ce", "sighting--15093a5d-56ed-4d38-9519-61a649a379c4", "sighting--7ac4d7b9-0334-42e2-8641-acb8d7f74414", "sighting--90aba9d5-7ca6-4b36-92e5-34f4f64ccece", "sighting--f7e9eab6-83bd-41da-90b0-52b1399f2418", "sighting--747cf16b-f6c8-49e4-a3b7-3e4f5c0d1fff", "sighting--30ec98e2-4e58-48be-b0cf-ccf0d16a19b2", "sighting--4bf996c2-f144-4d58-a71a-22dba47ea750", "sighting--e48873bf-cbfb-4c2c-ab6a-287c1ae574b2", "sighting--dec2bc9f-e50e-4752-b508-538d80fe3613", "sighting--50132cfc-c660-49c5-a68f-6f92dbc46973", "sighting--1ceadcfc-2541-4aee-a251-79ab7f37b405", "sighting--cd3f1dc0-2d33-4c86-a92f-9bcbc33a927f", "sighting--6e200453-ed70-4ddc-915d-30ac8daa4cb8", "sighting--24f84041-9094-4994-84b1-141e9eee0dd2", "sighting--589364fc-ddd0-41ed-842b-9633fd594dbd", "sighting--1bbe5d24-3de7-4f34-9e7f-4316fa6a7227", "sighting--18fa091f-c97c-4b90-bf92-644bc05e979a", "sighting--4af416dd-9e2b-4d4c-a08b-b31baded20a2", "sighting--cac41806-b2db-4c4e-90c9-367f2db60fce", "sighting--beb2d9df-234f-4d16-b161-2ee7ce45598f", "sighting--46a2d1bb-5c11-4f01-8cf8-cfee3e1b0349", "sighting--fc09577e-4220-4602-a6df-e8906066c660", "sighting--4594fcba-78b9-4a63-96ba-6470a74041df", "sighting--419910f4-caa1-435d-95b5-fa8f2c767df6", "sighting--ccfd3a96-46fd-474a-a3d3-705b1f8f9ceb", "sighting--4f6d825f-e0c6-46fd-9dde-9ddd4e3efe7e", "sighting--400771a7-9397-4eb1-b4fc-220040c0867a", "sighting--1435bdbe-62c5-4bd4-a069-9e54b5580219", "sighting--9803bd89-5955-450b-a829-bf0da8a712c2", "sighting--05d12204-4b86-4e10-98fc-cd4df1314a76", "sighting--52fb86e9-be7a-456b-84bf-1e989f1a52bc", "sighting--f8e1fd2f-1c47-4c62-8b2e-775d6ed2f3b8", "sighting--c582bb15-3017-4cad-98a5-2c733afb728b", "sighting--122f172e-f81f-487a-944f-4e7f0b9ce678", "sighting--2e240780-19ba-4229-ab5e-04c2c5ec08bc", "sighting--56aa6a1f-f6f1-499a-91b9-7b324ac76160", "sighting--5f41e843-33d7-418e-b175-a4b8417cd3e8", "sighting--19a76d41-fece-4ca5-bc2a-22489d13eac3", "sighting--4658029b-34a5-4517-bfa0-8b52aa198d44", "sighting--2c2316c8-6da4-4589-8cca-90cc7d612de8", "sighting--98b7de1a-611d-4dea-8764-44b1f26d3930", "sighting--ece2e300-f4be-48ba-bcc7-083b4b380d38", "sighting--d5c55291-5742-4ffc-846f-abf0e06c114a", "sighting--4f82a1de-8f04-4109-8e02-1ad55464cadf", "sighting--7260f642-4fc9-4fac-8fd6-5b40eed0bc7e", "sighting--c6506671-9b1b-4ee7-971f-1ecf30a09454", "sighting--aad0931c-809e-4261-a52d-c013b73127c8", "sighting--e88a5d02-15b3-447d-9366-af4020ea3d26", "sighting--64d9a027-bfc5-4396-b0cb-1500681046c8", "sighting--cd14f1c2-9875-4425-9595-4531f1d87b06", "sighting--3694aa74-bcbe-436f-b614-d7fb7fd33344", "sighting--41d7b32e-1748-4d8f-bcca-ca0bef80ab90", "sighting--4eee1ab7-2784-4e7b-a431-23328475d77c", "sighting--bec52c28-2409-44ae-a16f-e5dd0a8476f4", "sighting--f93d400e-c820-44e1-8927-5377e47b93b8", "sighting--469c7338-c5e6-4033-95db-e30395b7c1c3", "sighting--07ff0c68-49b1-49eb-9a65-2c03bb70b755", "sighting--a35a271c-2ab9-44de-8e48-06cb0bba44bc", "sighting--e304b151-7b06-4536-8882-42965e543c24", "sighting--1fdd034e-c905-4b96-81a6-4fa7c9e557d8", "sighting--c6835175-ec0f-4725-833f-b071e37d1d36", "sighting--fb015c95-b0ee-4707-8754-f9600ddd96e9", "sighting--f1f82161-4a97-494c-b6b4-bcaf700a8435", "sighting--e2c97d84-3fc5-4441-af6f-f377c4281e8e", "sighting--6b4b8a94-7529-44e1-9172-47d1eba58ca0", "sighting--1c7a2bbe-ff52-41d7-9fe5-80114421f94d", "sighting--8419ec9f-baa5-4101-a031-c94811d517e1", "sighting--7a51e7c9-ac81-41fa-98d1-7d34e2c643c4", "sighting--051a99cf-876f-4222-a31f-440fd7024a97", "sighting--11bf3e34-43bd-40a4-a5f6-8084fca415b8", "sighting--e1062005-979d-4066-a1f3-a3f825504637", "sighting--aa912cef-9b22-4dff-b020-a1e38577517d", "sighting--4847ee4a-b46e-4ac7-8db8-dd3baa7d2186", "sighting--bde8bc03-4afa-43a9-a585-4d3e0c28d2e4", "sighting--5ec2cd57-6076-4ee9-8a3a-85e500fb1e42", "sighting--3da626fa-d2d0-418d-9d7b-c4e1b0af482b", "sighting--411401e0-e682-4c2b-a440-752b0d02399b", "sighting--ca6fcbae-dfe8-49d3-9c12-0b8398027984", "sighting--65e8b95e-4290-463a-990c-3ff51baec0d1", "sighting--ad921360-9e65-419f-b80c-da005d5ba55d", "sighting--aacf73cf-5778-4e0c-9859-00f32c6bb654", "sighting--db14ab52-be98-405d-b539-90d2fe0107f0", "sighting--1b9887ed-966e-4ef8-b2d6-f5b369cd1cee", "sighting--ec95977e-8179-4e81-8cd6-90352e983bcc", "sighting--5090d838-ac67-4ba6-8b40-0a3747f6ad45", "sighting--8c5ccab6-54c3-4882-96b4-fb75a189a45f", "sighting--503ae5f0-d485-461d-8914-b58ad9def33a", "sighting--c8e6d456-c773-4468-9545-d974c296cba3", "sighting--0415d694-2453-4866-8260-7e69024a2802", "sighting--17ade97e-7f5a-44bc-83fe-661008c65750", "sighting--6cfe57ca-2813-4b57-b65b-50619cb8c34f", "sighting--70739fad-365c-4785-a836-578a4a2c715f", "sighting--4f6cf05b-e2d8-4e8f-bf45-a432ec2ae0e6", "sighting--46b409d5-8c9c-4113-8397-145b0f2b79a0", "sighting--04e0177b-ec5e-4557-b5fb-7a3723ae459a", "sighting--9b988137-d568-44f1-8fed-e466505928cb", "sighting--365b5e83-b316-4e00-a2a0-bcbc0c53c588", "sighting--8684a7d5-5de3-4353-8fef-9bdbbd53bc70", "sighting--32b2c627-abcb-4440-8d63-5d8eb5699199", "sighting--0c6a0f07-360a-42c6-9081-5424618be11d", "sighting--99146ebe-9df5-47f3-9ef7-41609728318b", "sighting--60b4d66a-d679-412f-9a6e-da839fcf5cca", "sighting--0cb7d489-9196-46c2-a70a-52bdbd282aac", "sighting--8fdeeaf0-a8a3-4b22-ba0b-2c6776870149", "sighting--6294ae16-10b8-4a88-86e8-d690ce665d1c", "sighting--39b62da8-a384-4180-b454-b679cab4b7b3", "sighting--da0ef1b8-8f5e-4d8d-8a0a-0b41342e7db5", "sighting--63dd7d1e-1a86-4d91-9c17-af901cfa92d3", "sighting--79bc07e4-8ca0-4f4a-b56c-7a862761cf5f", "sighting--2d99cb2f-7aed-43cd-a1cc-b16a5b8e5c5f", "sighting--22e5bd65-e66d-42d6-8b93-d32c4a6802a1", "sighting--344b65f9-1832-4781-8efe-31cb576aef38", "sighting--f654dc1e-e81b-49aa-b828-fa95456d5d2f", "sighting--6def2979-473c-40ba-864d-da3f97544565", "sighting--afb33093-3456-4512-b7a9-529799b12ad8", "sighting--b51e06d5-5226-4fac-9ce5-d24512396c83", "sighting--3412a5ab-c5f8-4615-8387-0f29bf48297c", "sighting--fc40258f-c361-46b4-a7a7-fb8d40d2838d", "sighting--fd9492f5-0a4a-4808-857f-c4cce0a84d97", "sighting--8f210498-d10f-479b-9916-11124b83a4b0", "sighting--52e7a655-2562-4b59-bb0e-3bc9bc260ee0", "sighting--e5675a63-bfda-44f6-9f42-90a7bc1a4e5a", "sighting--ef2658fb-c28a-44de-a8b4-13e05f9afb65", "sighting--1eb65a09-5ed8-4bcf-94ac-495b87692f8e", "sighting--249dd965-f447-49e0-9f65-7873ffaf09e1", "sighting--47d6b34a-768e-464a-a454-f26f653948b2", "sighting--cc033e55-97ff-4a4f-a092-b4b5eb5802b6", "sighting--9cf1292d-8764-41c5-b8ca-4dc097e7512c", "sighting--be0bff90-7b7a-46e9-bb9f-c7678ecf03b9", "sighting--c9c384da-06b0-490e-a3d4-9a6df6c88d53", "sighting--f7f16f3f-6520-4d94-bd66-187d7d3e0960", "sighting--4ba275d3-6756-4dc2-bb5f-941d403a2720", "sighting--844ecc4d-7228-4a50-9fe8-27c4949ab40d", "sighting--8430bce9-3ecd-42e8-b02a-8e7b9da35ddb", "sighting--0aa92eb5-4522-48b5-a546-fce42f81f136", "sighting--fee6a1d1-306c-4d81-b05d-d4f8fbc2f54d", "sighting--69e03130-f182-421f-b72f-0f0fb7c5d4ec", "sighting--aaf46406-504f-4ef2-8380-39d3374e0429", "sighting--afd8a6bc-7b14-4669-b60c-daf3206885ff", "sighting--aa1a866b-b180-4ff9-847c-4d75cfd50cef", "sighting--b9ff6339-bc53-4485-8685-9d946c1022c1", "sighting--760c6238-a4d6-43f0-8eea-8cbac4bb1353", "sighting--d2bc8505-bfec-46bd-b617-eafbb981012f", "sighting--1d191535-d186-4ffd-8988-318049370524", "sighting--0e5b1335-2aaf-432b-aabe-cf924f9cb457", "sighting--4d8c07eb-8379-4778-997e-7f99e0a0b004", "sighting--b32afc50-9226-466d-91bd-f309e10cbd7d", "sighting--72995a05-77b1-4925-93a8-aecdfa10d969", "sighting--b00c1651-7d2e-4b89-9d3d-2e19c08946e0", "sighting--a6458941-8b5b-4554-815d-924db03cf84d", "sighting--e0f7c2a6-388e-4b28-8f50-2f6988b15154", "sighting--73482779-3066-456e-bcb5-7899386640bc", "sighting--886250b4-c144-43c1-9d69-862b846cfd0c", "sighting--50704138-4607-44bd-862f-71f60c23917d", "sighting--4755ef69-e565-47d8-856a-b97b88bf84ac", "sighting--d5e59ace-5a3e-4d2f-9f46-a0b1402161cf", "sighting--3bfb3cdb-3011-4645-9673-7def8b5793fa", "sighting--780dde00-90b9-4a32-9bb1-bce21d9850e1", "sighting--090cf09c-6833-4c8c-815e-4375a68edc5e", "sighting--12b410c0-b2f1-42dc-b0f0-14db30ff12dd", "sighting--bddb7977-8127-44c2-9b49-0cd82cf8c12e", "sighting--504e248c-08a5-4067-aa1d-8d49a8ee2b4d", "sighting--5fc019cf-b096-4c64-9ea3-a6b5e911dd4c", "sighting--0876e739-ff1f-4615-a0ed-b8633ca870d8", "sighting--4ddd0713-1d56-4393-aadd-68663b4be140", "sighting--02448f0a-d030-489c-b8b5-c566a9c73b60", "sighting--c03e5096-869d-47aa-92e8-c784a0c74b64", "sighting--df8c76c3-aeae-472b-9a14-7634a1bb7f5e", "sighting--b07d6b65-f1fe-45de-84ee-cd8888ef68fd", "sighting--ccd3077f-00b9-4c56-82d3-c77d4fafb860", "sighting--f55325a6-e3de-4c05-9f76-9568b4cf39e1", "sighting--0fb0c1dd-80b0-4059-8092-68f380b94b1f", "sighting--e0f26ab8-ccfe-4add-a054-47fbfe8b185e", "sighting--2bb77b00-22a2-4d42-b30b-5eb182d7382a", "sighting--ffed5556-7995-40f0-8257-454b8b20bf50", "sighting--2c08e27b-098d-49cd-a142-ecdfd83a49df", "sighting--85d61f5c-be4f-4dc2-b08d-16871faf552a", "sighting--d50a8820-33f4-445b-ae04-bc767dd69a94", "sighting--32a9fb7c-53e8-484c-a462-3711f33918f9", "sighting--35edd8c7-5066-49cc-94ce-48999040f33d", "sighting--f8a328b9-2af8-4070-8f76-bdfaa6ad2f80", "sighting--d7e81de2-faf3-4f9e-9747-e2d646af52dc", "sighting--57f7c210-f330-4cfd-8f3e-b8db6889b7ea", "sighting--df865e32-a7db-4325-b3f2-2b5fc760f49f", "sighting--8320136e-8216-4662-9ea4-4b216ed00405", "sighting--c16a335d-6c01-4993-a44a-8bf89ee3da84", "sighting--c8476423-e5f9-4e61-8bff-6db353618348", "sighting--a18caff5-6bef-4bf7-983f-4295f6dd39c8", "sighting--2d3ba59d-3c46-4cb3-a346-6aa430fa958f", "sighting--fcf7b884-6e54-4c40-bb79-ba61df646d3c", "sighting--479f4484-db11-4810-a558-af379d915e57", "sighting--bc9779c9-da9c-4dba-a84f-a4e8830283bb", "sighting--53bd5ac3-84ad-45c3-9d5e-6418b1bb007c", "sighting--0c96ca4e-0f05-41e6-b2ed-e486e8911067", "sighting--c014381c-5cca-42be-8c26-ed1f5e540b1e", "sighting--60250364-971c-48a1-94f1-c602d19f264a", "sighting--383a4d4f-2c33-4edf-8bee-54834873c5e8", "sighting--a106840a-9c8b-4e06-9d35-2a93d3d3c1ec", "sighting--be689f90-8277-4cdc-8b4f-170b204e1e5c", "sighting--2ebd9734-db74-4d76-a8ef-1ebafe4dc670", "sighting--be5bbb23-d7a0-4f9a-8c43-b53de01d4aa3", "sighting--7e386fcb-7607-4403-bdea-ee645213227d", "sighting--773e79b0-af67-4742-a7d9-ee3bd2a782d9", "sighting--9a5c6c82-52bd-4d0d-8d64-be4c55c946f0", "sighting--fd4acb87-cae9-4d9b-a5ba-145236e4f649", "sighting--e1272e13-3ab8-44cd-9aa5-8da7473037ec", "sighting--fd4dd920-7acc-4c56-8c50-85f484cf5e99", "sighting--57ba1d30-8ee0-4719-8017-4dfb88f0e084", "sighting--dd24b243-9a68-4733-bdef-f228a8a4a9cd", "sighting--4e35d1a5-69d1-4917-9160-b6e203e1d5fb", "sighting--6c2792c7-8934-4083-a3a9-19669f0a63b9", "sighting--8054ace8-eb47-4f8e-8593-667290ef74d4", "sighting--4a748abf-97c0-4dd3-9dfe-072f72216fbf", "sighting--7ac4b0f2-30bb-4950-b262-7ca36092bfad", "sighting--874d147c-c5c4-469b-b5ec-fa0ca72b9981", "sighting--45e063f5-92e8-4bb5-b3d5-75030d4816f0", "sighting--1124d462-e96d-4607-b35f-b13089ce3c10", "sighting--e8122a12-bc27-47e7-8f8c-7beafa29ea95", "sighting--692528e5-0cf6-4b85-940e-02e39699c46c", "sighting--8be9c6ba-41fb-4ce0-8962-66cf79771f79", "sighting--900a6f26-8ae1-467d-9432-a2cd6af750ce", "sighting--37b35903-c7ef-4926-846d-f33e0039daa9", "sighting--14f9ab26-c9ab-4d00-9d5a-3787a47b916a", "sighting--3824fcda-5da7-41d6-b966-6535f32dbfa7", "sighting--e62937be-b913-467d-83a9-c55c73431090", "sighting--b377bf9d-dc3a-4a74-9f71-9e50ba818e71", "sighting--cc246a8e-f0e0-4bd7-a397-f5bc5e581cb3", "sighting--e718c590-2612-4e81-b2f6-910ad8acb9d3", "sighting--80a2b0d3-563f-4fe3-ba92-529941de1c29", "sighting--cbc3b22e-e7cd-4d0f-8d2d-7121f0405edc", "sighting--ace56703-3ebe-42f1-9b16-9900d68e2c1d", "sighting--6ff3b0cc-8980-4514-bc5f-263df682da58", "sighting--70afea9c-218f-436b-aa7a-c1d1be05412b", "sighting--918b7386-93d3-4021-b91c-f1e5c9316542", "sighting--b5059e76-8ee2-4e6b-9ffa-f24df1e3d2e3", "sighting--e3668938-3a14-428b-b953-c88995d9bedd", "sighting--79f7168d-2587-43d8-b66e-b38cf346111e", "sighting--bb0928a7-e2e9-4c78-83e1-44c0a55959b0", "sighting--6c19aef0-063f-4c68-b2e9-3ec31f5d1989", "sighting--829f45d8-0b70-458d-b094-d3f3f256b917", "sighting--ebc088ea-20b0-453c-88a0-059aef33548b", "sighting--c3f7df57-650d-40f4-87a2-78bb0d9b1bc5", "sighting--1713ec32-6376-4c6a-a43b-b638872542dd", "sighting--81ca5521-bd87-478d-ba50-ca85d23aef50", "sighting--e14ddf26-cba7-4390-ac43-e76143302c6f", "sighting--c00aa8e9-8e6b-4a18-ac9f-9d982d408a27", "sighting--638e52c5-8e97-44c9-85b8-e6bbee57933a", "sighting--f0373048-61bc-476e-a26a-59a9fce49e5f", "sighting--743219db-006e-4728-8dea-67a1228df9fa", "sighting--63c8eb3b-31d8-4270-bc69-648dd1b92078", "sighting--301ede8e-c1a6-48ac-933d-d237d7b99f5f", "sighting--7ec9ecf3-3e9e-474c-8ff4-a1a20635fc4f", "sighting--dc3b8d50-97fa-464f-a3da-c43bbc6b8cef", "sighting--46a81fef-3881-4987-ac6a-1f691daaa5ae", "sighting--c21b8c36-f700-4cdf-8a6f-bdc6b9578704", "sighting--f51bb834-373a-4c08-9287-0e69cd1432cc", "sighting--647e9f98-69bf-492f-88c4-38b7f8a16170", "sighting--87268d05-4794-4019-9f18-ddc915f0cb01", "sighting--e932c00d-8a05-4ad5-9e19-13897958d04f", "sighting--87a58b8d-9a5e-4dda-95dd-d2b341b7c2a9", "sighting--8e033f4c-224a-477d-b5c0-626c24fdb1d0", "sighting--11faf0f0-c998-427e-a4ce-202817c63288", "sighting--88d060be-1a51-4b3e-b601-ba356fb45828", "sighting--644de2af-9df0-45d7-a122-b64733634a3a", "sighting--c4edaedc-895c-4092-b465-c48568a63088", "sighting--89b3104a-1234-4ad4-a9fc-d9022ecccd7e", "sighting--d6537995-0e50-4891-beef-aa1accf3c5d0", "sighting--b3d361e7-603f-4553-a0b1-a2105d501b58", "sighting--f597bb38-8d07-408a-b7d9-3f02e93a13f3", "sighting--25abeef8-fd75-418c-bae6-f19bca30fbd0", "sighting--c0d6da1a-c594-4d72-b31e-4c52af862142", "sighting--a77cdf38-06fc-45d0-901b-46d6b8dda200", "sighting--9d578218-17c1-422d-b5c7-a738d442723a", "sighting--a944ece2-b553-4b55-90a8-fc1accdd92be", "sighting--a54d3c7e-68b5-4354-a1a9-b6eb5cee4468", "sighting--a1cd387b-f6d7-4006-be41-daa51b43d7a3", "sighting--f3aa8844-1a97-4c05-9815-3ba2304ec61e", "sighting--be27b889-4c2d-4c23-a648-da06d44641bc", "sighting--a80b48a9-323c-492a-b820-14aa4ca36dc5", "sighting--64e7c3f8-6c08-41b7-9bfc-7148a5f6198d", "sighting--50392778-6038-4398-b11e-557c78491974", "sighting--bef21dc7-75f2-484d-8864-d2f6bba435cd", "sighting--58bf61a1-0dcf-45d0-a95a-e28b48a3904c", "sighting--3aefdcef-1755-4ef4-927b-886b1bb06ef0", "sighting--b87f2431-44bc-4450-b2ab-8896346d20c9", "sighting--4470a7d8-8ab5-4f28-a1a9-ee9746983aea", "sighting--95944169-4cfb-4553-9b16-f88a9d666748", "sighting--d8918f10-d220-42ac-8f93-59b68a9cc982", "sighting--8f188d1b-2df9-4519-9202-0fd6866255db", "sighting--f0125f94-5114-48ca-88cf-a1ee3ff5514d", "sighting--ce573d59-24fc-48f2-8259-0255047f9cde", "sighting--8b9dbbe4-9033-434e-b934-e38889eebd76", "sighting--b2cf1b3f-5fc0-4117-ae64-1244a5d7d6f9", "sighting--06d3af0e-2509-420c-aa87-d745b21acd9d", "sighting--4dd28d70-4b45-4d4c-b481-e6a45c976fdb", "sighting--2e1d8927-2b33-44d6-8069-009f7d3f83e7", "sighting--3ebc6d8a-0b31-496a-a72e-a4eae9f83377", "sighting--08746695-a7f4-4729-a280-9c56a794c2e9", "sighting--bbe96e71-7699-44d4-9e9d-47b781dc38d2", "sighting--80ae99fc-3009-42f3-a447-fc4ede5a643b", "sighting--3fcebcdc-843d-436d-9fc5-153fe38b65ea", "sighting--715227b1-9f59-4932-a0cb-be137008e285", "sighting--25629a53-29de-425f-85ae-50a465778416", "sighting--2e6e24ff-6d64-4ca7-b600-9e7eb5d866fa", "sighting--d3044976-32d5-464e-a396-3cfc5809c92f", "sighting--0808177a-f018-4123-9d45-037ba4b82466", "sighting--0ce88c87-50a3-4f1c-8dd3-fded6c5dca05", "sighting--1c46f84c-9929-41de-9016-2a7e274a8da1", "sighting--e70216cc-4935-4a64-b981-437bab2cea2a", "sighting--d107a4c2-f430-41eb-9790-679c906f8f39", "sighting--d6375dd9-8ade-4b00-a1eb-dbd3c7ab3d64", "sighting--0b2c759f-048c-475e-8170-fc97986421d8", "sighting--c6c0b1da-2283-45e9-a7d3-f24d1f7bc0e1", "sighting--dcfc36b5-e46f-4b5f-9e8d-855568cf2a61", "sighting--5fe4449f-9052-49bb-89bb-9ce7a7c922de", "sighting--9b27b39f-aaa5-46c0-808f-438e500da90f", "sighting--ba2bb52a-09f8-464c-af99-5b2327eeb1a8", "sighting--ba7ff1c3-815f-4b83-96b5-811f9e2d35cc", "sighting--098fe800-6e56-480f-ab22-2da020945a56", "sighting--1e2ad162-f869-4270-a0ed-7c2c6b5d8b5e", "sighting--435ddcec-943d-4cc9-ab91-f9eecccbeb87", "sighting--1c1076de-8f2e-4c10-902b-e84209846f75", "sighting--21f60298-b77c-4af9-a664-943f565f7f60", "sighting--3e31ad95-73af-4d07-851b-88b357a57a2c", "sighting--0b58e7c9-0983-46ce-ab69-efa88bfe5312", "sighting--29e338f1-bba5-4913-aa5d-e3d9d0d7dbb3", "sighting--45bde0bf-09b7-45be-9204-fd0fd8e4861d", "sighting--a5e0b88d-5458-4a40-a6ae-f73f64643011", "sighting--27eaaba0-379a-41f4-b405-4181b37e4f23", "sighting--df7732ad-0321-4263-8e53-5d7976f9a457", "sighting--306e7c9a-7c1a-471f-88b0-ba76d6ad8e49", "sighting--9a993289-05e3-4b6a-b559-ac358916593f", "sighting--3f3a1a41-d779-4c69-8e3a-67b680b3c633", "sighting--aef2b89f-7665-4113-8fb7-ef018b9dc800", "sighting--0c14f5ae-fcf2-4ede-9b6e-ed3a4444f992", "sighting--efc4c025-de4c-45ec-bcd0-f415b5789805", "sighting--830ec1b4-7005-4298-99ae-465124154991", "sighting--80ddac50-3381-4047-8b1d-76180f81d77d", "sighting--cee60ae2-4541-45dc-8461-2b941bbe7a3a", "sighting--37211880-f9a8-49ff-aefb-8ab6457544ec", "sighting--074afc8f-8074-4629-bc7f-4ca98e9bd0d2", "sighting--e54392f9-6199-4330-86b1-b6bdb6051820", "sighting--f879fa56-2e63-4cd6-8ec8-c27cdb816057", "sighting--2752f26d-669c-476d-8453-1961971cef4d", "sighting--ba1c40cd-9bf1-44f5-8f91-09a121d75e1b", "sighting--5a5b545c-1930-4e57-8fc5-50e710eb8aa1", "sighting--50a98edb-1ad2-45bf-8bf1-4044189cc509", "sighting--796f2390-fa7f-4ec8-a459-b8ad18b98676", "sighting--aacc9a82-82eb-4937-b0a5-af9262817bb8", "sighting--445eb1cc-ea4e-4637-860b-8f0e5927ca84", "sighting--e170286e-ed35-432a-a9e5-d4d1784c5aa8", "sighting--7188edbe-8bef-4058-be91-cf6c8374b2e3", "sighting--6bda5deb-6b14-41b3-90af-59271cccc427", "sighting--2c524aca-6867-4d68-b04e-1525fff6920e", "sighting--c01f22fe-fafe-4c88-b6e1-b3d7955564dd", "sighting--a8ba2435-3f55-40bb-bc30-f5e17722237b", "sighting--9b4a7341-6613-4fa1-8992-93215ce2a722", "sighting--549a086d-f7a9-4ea0-989e-12e05b68f857", "sighting--e71fe662-b539-463d-9118-918425edd3cf", "sighting--e6811838-57ca-4695-8ed7-bf00c9ebcd94", "sighting--9d4f7c5e-9937-4689-990d-afdc36489d42", "sighting--f275faed-8aaa-4cf9-8ab0-dd5717828fa3", "sighting--b4ed07de-42fc-4fc1-bf84-c2a58de86ec3", "sighting--3cb4bef9-fa82-4b6b-854e-ad02af2e9bab", "sighting--d0c40ec7-af32-41dc-b408-0323b6a24385", "sighting--74cfaadf-14ef-49a8-a129-e3ff7cc8367a", "sighting--6692faa4-e472-4c10-b5f3-a2dfc7a1a3f7", "sighting--016bd3bc-d572-4e9c-857f-e3b77271b1e5", "sighting--878575a2-f454-4107-bea2-7f949b723bed", "sighting--57e4b9f5-a53f-4ee4-a867-365206e88016", "sighting--0cef90db-6a67-4cb3-befe-a9ecb3ed50bc", "sighting--ef6b29c7-cf30-46e3-9ea6-a13dd6c5160d", "sighting--97d1cdeb-26d8-4e08-aac9-c32f7dbfc979", "sighting--f645ea3c-0e48-48a5-9009-204fa20514c6", "sighting--833c5b4e-d754-46e4-9dd5-e2428db628cc", "sighting--ad159453-bca6-4340-8b30-5e2fe4ea2ead", "sighting--7ade3272-672a-43f9-bc44-2b784843abc4", "sighting--f16c7f6a-6615-4e9d-9756-af2096cc0832", "sighting--559f234f-a084-413e-aa4e-2cd50a794516", "sighting--94201023-5eb0-4b8d-bb28-38639670bc07", "sighting--b29b052f-fa7b-44df-b2c5-ce997bc73c40", "sighting--1f9875f9-801a-4376-b16a-f0fa5c6c024a", "sighting--cd4dbf5a-274b-48cf-a023-7c8418f1d69e", "sighting--da96fb17-2c03-43cc-8db1-9fccfd2391c0", "sighting--624c5b68-b1d3-453d-b129-ecce77977abf", "sighting--598b9ff8-f910-44b9-b6c8-05a1db0e725f", "sighting--5f43294c-dacd-4b60-862a-2ab17386151d", "sighting--d95e23e2-c846-45ee-8934-b7da71bf74f7", "sighting--a9b65437-5f40-4b96-b5c7-5c19d2790d46", "sighting--79e838ee-6768-4c7f-a694-ea21b82e2abf", "sighting--beb3f972-d70c-4d66-bc40-dbe40d6837eb", "sighting--73329c22-502b-4d1d-9624-4e8af7813b5b", "sighting--90551f0d-29da-459d-b46d-d57031983461", "sighting--5d091282-cd2f-45cc-bbfb-36b8b46cf820", "sighting--5c06ce32-dbbb-4284-b776-aa96613a91c9", "sighting--5ccccc91-670a-4ce1-8216-c7bbaa6da58f", "sighting--96bf8076-c4e0-4f53-a39e-85aea6f05db2", "sighting--59821523-3c15-4ae8-a3a2-b8e912d23a7a", "sighting--5395b531-9b1a-4b5c-8525-73acabbf3ca0", "sighting--203a781a-1f95-44a6-a06a-4defb25f9d73", "sighting--2bf42702-82ba-4f2c-bd2f-2756f39a09af", "sighting--249445a9-4fd9-440c-97ad-ba5964d9e88b", "sighting--d117adc9-ad65-41a4-8bff-8f2c6d1468fc", "sighting--f8aedb4a-d8d4-43ab-a4b9-e9c36c1ad9ad", "sighting--3bebe63d-7b47-432f-96a5-0e6ec1949e71", "sighting--b05f4461-892e-40e4-b0fa-70dfe4c8b54e", "sighting--b8af477d-39d7-41cf-9b1b-c59a98603161", "sighting--1e3dc2ab-5381-4d07-bc56-f0adb1c8ed5f", "sighting--b1c18b80-ba90-41d1-a80d-32cd78adcc86", "sighting--0591e322-edfb-4271-bf10-442ca97690b8", "sighting--0344736f-8940-4c37-a05a-8aa37d26856f", "sighting--98cb6311-094d-41ba-a404-edd3fdedf427", "sighting--8b8821c1-30eb-428c-bc94-d5d1fb45a896", "sighting--b24916f7-767d-4169-a96a-fdf0b41cb325", "sighting--ffb539b8-e99f-480d-8791-ae4fe7f42e1b", "sighting--d3a2911e-0841-4724-ab75-b5df57e00b35", "sighting--6ba5a8a0-713e-4c1c-b60d-4b398c24fb4a", "sighting--c051e055-085c-44d4-b8ed-96837c690036", "sighting--1c3bd514-92c7-4de1-a60c-e5cd5d4de690", "sighting--e71cc598-064e-49c2-a528-6a870fa557a0", "sighting--e9e9370a-1df9-47e0-8100-01c2505ca076", "sighting--477c5008-506e-4102-b277-b8157988af68", "sighting--517ff243-7e1a-4409-9337-59df622826ee", "sighting--324041ac-f2d9-4def-8e72-368d219ffa3b", "sighting--1ff4adb1-5326-4aa7-a6ee-335a739f49e5", "sighting--8813dac4-330f-4e02-aca9-c66b23fe64c6", "sighting--5edfb598-82e7-4aa1-9ef4-f84a6b99952e", "sighting--2a986cb4-302d-4577-95b9-2475a5174d76", "sighting--3af2de2a-5f8e-4926-8131-5f0fd58a315e", "sighting--0f3c0d91-485c-46df-8b7b-d874c0966bd9", "sighting--d70e46b5-5579-4f60-ac5f-3ef29bb1db48", "sighting--85ea1e21-9d04-4beb-970e-d0c473308336", "sighting--67cf567e-0018-4c02-93d9-d2a6c731efc8", "sighting--345dc45c-d306-4b44-b832-6cc7c0c4f48e", "sighting--11db168c-63f4-47c1-b511-0d40de525d37", "sighting--4bfad444-3d5b-4a4e-b334-a01d7c891612", "sighting--d6606b43-b72d-43cb-b2af-de215de8e4d5", "sighting--00c33a54-723d-4544-9c42-eed02f107a86", "sighting--2c778a69-cea4-4e4c-bd7f-e20cda7fcb1b", "sighting--b4ad50a4-4d8d-4355-9c38-ec3cfff54883", "sighting--1d108921-1c1f-40d2-baac-e2d65f155f62", "sighting--58fe8372-13b5-4e90-87b5-46e280e3afee", "sighting--bfe5d577-c637-495f-829e-2f8f36c57d1a", "sighting--1865e39d-1eee-4b98-bb6c-649fbeec2275", "sighting--08f0ae30-4160-40e8-ae69-fee320c273b3", "sighting--a36f05d3-0bb7-43e7-a0d8-56e63482334b", "sighting--ad6ac60d-d444-44c2-a43c-d13bdf859516", "sighting--b920fd5b-4bfc-4154-957d-a981a528e4e3", "sighting--422566a0-e288-4e55-8e3a-39760ac71537", "sighting--c1310630-dc66-4341-aca4-707410279b8d", "sighting--905e94f2-cb90-4002-9f63-b5645b4d317d", "sighting--b14160a1-58e8-4396-8d95-b202749b6e51", "sighting--435cbac8-11eb-46d8-8fe2-3cc19dbe94c2", "sighting--8d2e144e-d3d5-4831-843a-23e0831bf697", "sighting--5e1f15ec-237a-4ad4-b1a5-addeda0b77a4", "sighting--f642377d-ef5a-4f75-b78c-3e43cbdc189e", "sighting--b30203bc-7b2d-4ce5-af97-5b48fe3b2a79", "sighting--709b98db-a415-4ce2-bfb8-0063562bbb38", "sighting--4e071ee0-c1d4-4cdc-9cd6-6fb3f9efb710", "sighting--66885b80-ecdf-4ee4-8c8a-5b2f623d65b7", "sighting--baa6a284-0309-403c-8860-046f26b5ee12", "sighting--ee4608d4-438b-4752-abe2-7dc86fd8dc70", "sighting--b11804f9-955a-4719-8ba5-d8c6f1e3da64", "sighting--238b8a5b-f4f3-4c2c-95a3-0d10630fd301", "sighting--72e55f9a-a1f7-4e28-a2ab-f3dc3fd07ba5", "sighting--a21a6b4b-609b-4325-9aaf-74c65df6a8f2", "sighting--936dce87-da09-4550-8aee-01aef620d253", "sighting--371ba4c5-3d67-4512-98af-98ef7e19bcc8", "sighting--704057a8-07c7-4eae-9124-90c8ba996f83", "sighting--3792f9b1-1197-405b-b6bf-5baa26e2f4d8", "sighting--2b62fccd-f00d-40d0-8b64-e556e4469f55", "sighting--da687670-4a5b-499e-baaa-655e35b7895e", "sighting--ba5fe511-0a0c-40a7-85f6-55e5116dac6a", "sighting--8f173900-64a0-41bb-ab7c-3526ab0eda9e", "sighting--4178b878-2a49-4794-b15a-192137d98bd7", "sighting--1ed07b84-cecd-44e1-927b-3ff94ff49361", "sighting--ee580004-7c38-4e1a-a7e7-352035182ae4", "sighting--d1bacaa9-578a-45f0-ad4f-93f3dc129da5", "sighting--5e43d901-3731-40e1-b057-882611eca430", "sighting--5a7e7749-a9a6-4782-a413-1198a156c7d3", "sighting--e841f359-c3cd-4228-9c75-0c632f533175", "sighting--d589a72d-d608-4b1c-9e2b-e0d8690066ae", "sighting--cc475ae0-3923-4686-aa5e-b7c58cb67fe3", "sighting--91dae57a-d20c-4a7d-bdae-cac565e3a505", "sighting--a0fa8ad7-1319-4bd9-a038-4fa95d68d390", "sighting--1d962ed4-33c8-47a5-8aa2-1c2b8a087c38", "sighting--4260b73f-1e5e-498f-b1c3-6049c8b8bbb5", "sighting--695e9df4-8b4c-4711-a587-575f8606a05a", "sighting--ef845574-1b1d-4cb1-ba5f-418969868cf1", "sighting--474951f6-2ebe-4925-972f-5532c5a6b953", "sighting--56dd3de8-1320-4bdd-88e2-2d80ada11d3e", "sighting--b04231a7-d25b-4bdd-be17-b34a644fc357", "sighting--f22afc05-c76c-4a69-81b7-ed70eeeb57ae", "sighting--f1f43b1e-3fec-42d9-801b-89df5c1b39ea", "sighting--cbceb9aa-2f47-4071-a77c-b43e07b97540", "sighting--46fdd810-bdfc-4af1-9f8a-b8dfbba99851", "sighting--4cdd1da3-566f-4757-b5c4-7bd5bbfce11d", "sighting--88397aa3-041c-47ec-a927-75f3e69ad0b4", "sighting--c987d55c-99a5-4248-87d1-22828360fab6", "sighting--4e3099f3-9714-4357-b672-27a4042face8", "sighting--8586e11a-0172-4707-8a68-aa648417a0af", "sighting--b8f90e75-666f-4c0f-bd48-f96c0fd1db46", "sighting--53d3d36c-d137-4f7c-ba36-27ad37d5ee12", "sighting--609c15ac-a8d2-44ed-97cf-5fd931d24384", "sighting--a222f826-e59b-4fcf-a6b4-03f0f61ef762", "sighting--30d64758-d3fd-4c3e-9a82-e61db22873ac", "sighting--9a99168b-323b-4d93-9b9e-7289127fc1c0", "sighting--e2e435c4-fa34-4771-9a80-93b75e159343", "sighting--dd4d964c-aa70-4ede-a978-705119f233e2", "sighting--30dc14f4-fe18-4c18-99fd-474e62e73ac1", "sighting--35020e9b-3ed1-4ee2-8a08-a5cdcc0a5953", "sighting--a5573915-6010-4d89-8968-95365f8262b7", "sighting--3718db48-6fcf-4075-94dc-ecac96150081", "sighting--567d5c01-d168-4651-b793-6ca12d09df81", "sighting--08f9f352-c917-4c7c-a93e-2a433d0b3fd0", "sighting--f5fff716-bfd4-43e4-851e-4fa68f7b2011", "sighting--6a057efb-3a93-4ce5-9fcd-0f13ff303a0a", "sighting--4486b825-f956-42b7-b9dc-6b8aa79c7222", "sighting--70406497-e6f0-41dd-afac-cb7de59d476a", "sighting--8f4c0a23-b37d-4fc9-bf94-79c6fc0933b5", "sighting--8778ffcd-e0d9-43bd-b16f-c0d1dfe48a02", "sighting--88b672e2-9903-48c3-96ab-bdc861ef2e29", "sighting--d6d45255-9243-4d60-8f59-4d6b284fa6c9", "sighting--e01ad572-5d2f-43ad-8488-6393d472abeb", "sighting--e7cc8236-4c30-4199-9d42-b1bba6c05ccc", "sighting--edbeccef-ab02-4e8a-9b60-e75ea0ae7f40", "sighting--f5edc0c1-a46e-4c6c-87b4-26b14004e359", "sighting--0bbe372f-e415-4459-b7f4-a72824f8462d", "sighting--71fcc157-6813-499c-a40d-c96cf174cf62", "sighting--3ecbdc15-53fe-4217-ab28-4b078debbb1d", "sighting--1046cbbb-bef9-4e6c-91c4-46ee7343dd09", "sighting--76b61961-d4b1-4e8d-8666-78979e519301", "sighting--031ef496-4143-41df-9aff-88f890ec058d", "sighting--c3b175c9-8f15-49fa-92b5-8170af2b22cb", "sighting--e62616ec-8be6-475f-bae7-ff4e5e967585", "sighting--492aea74-251d-49fd-b113-42b3bb6234e1", "sighting--ef79f36d-aa59-4f62-9488-59d0c56ea8da", "sighting--a5b5e9ed-24c5-429a-a921-1faa8ccd784f", "sighting--6387542b-f437-4080-b4e2-9eb7a2cd4b6d", "sighting--8a14fb05-0957-4b83-b329-47e59681fb0d", "sighting--efbebb8c-dce4-4604-b162-b5e008b2833d", "sighting--ae58a38f-8e72-4845-9a3f-dd6970cf034e", "sighting--bf1a24b6-720d-4de5-beec-7243f31d0982", "sighting--aff0dbf7-82df-4341-abc3-57090aa18633", "sighting--52d8d1c0-903b-45c4-9456-8d8564ad254a", "sighting--98c37513-316d-4924-8504-73039c5380e7", "sighting--95363e70-1eec-45f9-9b1e-db003750f337", "sighting--231ffafe-3bc1-45d4-8e09-352a4a233dc8", "sighting--7a57b1f4-4599-4dc9-af26-7b3e4058c91a", "sighting--a362cea5-0cd6-4a20-8ee4-8b5b20bd0ff8", "sighting--cd1cf6b3-0710-402e-be0b-599476c18aa4", "sighting--b6b42378-25bc-4b06-a528-0149ee577a76", "sighting--dce48e63-ee8b-4a5d-8b3c-7c168ea1573d", "sighting--ce8ea248-0ca1-49ba-b655-42eaaa99b3a0", "sighting--8edd5069-a78c-4462-9d83-f0265eb9ad21", "sighting--e710420f-536c-447f-bba0-bd5b2a93bbc1", "sighting--eceb49e4-d36e-4eaa-bc20-78353cd5640a", "sighting--cb43a2f5-f360-461c-a08b-7a6c633ff7ec", "sighting--19c2608d-b8b2-4b63-abd9-68db4f4e295d", "sighting--a9f61442-3206-4392-be31-2bc3e36331ad", "sighting--9ef8d091-b3e4-4d6e-a421-7f25b54be700", "sighting--99b3419c-713e-45ee-9451-1b6fb1cccd76", "sighting--41721802-4ba4-4883-8dd2-5e20ed9b2c66", "sighting--8a1a6330-5b69-45d5-bf63-3ef2315ba930", "sighting--2bc5c625-d1dd-40fa-900c-b10d99c11e13", "sighting--0002a95b-14a4-43af-9993-c5a18a30967f", "sighting--3ac88ee7-4013-4f6e-8767-7cb6e3bc22c8", "sighting--cefdbc45-c8e2-4b95-badb-8909fea3ad8f", "sighting--6d585c91-58b6-4eda-b06e-7bab0b59bcbc", "sighting--19a7b791-684f-4132-aad2-29c2b94ea4e0", "sighting--95cf0cca-8cbe-48da-a9ea-210db9e5c2c9", "sighting--d06c765b-62ad-44c5-b4cc-3269865dfae9", "sighting--ca5c7258-7c1c-4047-85e6-71cd38ae51b9", "sighting--8f28e9c2-dc36-409c-997e-125819f6155c", "sighting--fbb3067c-2163-4158-8e29-5c5c2517c0c6", "sighting--8de8470a-a2c4-4597-8eb9-6f2525e333c2", "sighting--5458ab83-06ea-4310-9954-7653440bd6fa", "sighting--09bce9cc-812d-479e-a20e-b1d4394fee40", "sighting--474cb44e-230d-42ed-9726-82820ec10d78", "sighting--5319c717-240a-4949-84a5-a7f92214eae6", "sighting--c8223e31-48c6-4829-ac3c-5d0177c0dc64", "sighting--97ccd847-fd96-40a3-8b4b-141cee808fe3", "sighting--88eaa414-c46b-4429-8b73-f06bf90173a9", "sighting--4549ea0a-87f5-4a28-be40-42a0633f29e9", "sighting--df35890f-8e07-4900-baba-19b90902ad37", "sighting--04f2b64b-3056-45bd-b02e-a6e49f3dc8c8", "sighting--c0a00c35-1f5a-40a4-9c76-d56db569f34c", "sighting--76d83df3-707b-4ff5-913d-f540658f3b60", "sighting--fdd28f63-b061-4077-8e14-5cd66bdb8b60", "sighting--d515b66b-356b-4876-ac48-e5f940e9b54f", "sighting--a664280a-f936-4a64-b4d4-3f2c731d739b", "sighting--6dfd3155-4044-4b06-ac45-25f964da6165", "sighting--ac196ded-ee4a-4e5f-a890-93b771f0117b", "sighting--ca12abf0-4c06-495f-9c92-7830dfe011d2", "sighting--8c86fbfe-79f7-4b48-aca8-e7f344895672", "sighting--551a14dc-1b4c-418a-ad21-c0377b350863", "sighting--a01248d8-e20d-411a-8f88-f2fae25209d5", "sighting--4fa80635-af7c-43c7-840a-bc06e53348d6", "sighting--3f854236-7bdc-493d-9e49-3326c535d806", "sighting--b01e8388-7f8d-4c3a-a76f-3219c19303c4", "sighting--64dfc7eb-4525-4813-b9b2-2c4b21ea601a", "sighting--dd39862c-590b-4d05-b157-043d64fc039b", "sighting--e9e3db57-c78b-4b6d-8237-d2be7195a33f", "sighting--2574ea0d-8037-4e22-9ca6-d85fb8a6bd48", "sighting--d0b15bcf-f35c-4e05-9811-537df3cbc81d", "sighting--c745fc4c-90e8-436a-b83e-2b09cbeb8888", "sighting--fd84dbc2-2bda-4d3e-8c03-7560c4ac34b6", "sighting--c1f09c7c-acf6-4ff0-80c3-1d4fe3582850", "sighting--3c918ab9-0da0-45a2-a77a-8267d075ef92", "sighting--3338ddcc-e55c-4daa-8537-e4dfce866442", "sighting--5b9af55f-266d-4ed5-8a4a-dfdde03ebde0", "sighting--11e3ee4b-08ff-4b27-bdce-39d496f43430", "sighting--331f7c46-2178-4cdf-8c78-a11d07c55a70", "sighting--94647465-fe4d-41eb-96ac-967230fc0857", "sighting--45f58af9-aebb-4131-8a72-c12785e3637c", "sighting--a31e3a3a-cf2b-4d24-8298-3bfbbb9b15ea", "sighting--e15999ec-53d0-4efc-bafb-bcf1f52cd394", "sighting--1b0d04fc-4497-4ae4-af19-e7895cf14482", "sighting--07585c58-55ea-4aac-b82a-e4058386e617", "sighting--9b296082-4da3-4481-9187-80acbfbde043", "sighting--4e29be54-1d49-4068-8734-493ee9966281", "sighting--8277cfba-166e-48fd-b259-0fed1df62639", "sighting--8fe8b0dc-adef-4af6-b82e-f95d890f053f", "sighting--550b11f7-a722-46cd-bc69-442820f0bbd3", "sighting--8d24b92d-0388-4aad-bae7-d353d9e1f289", "sighting--dac563b2-a708-4ae7-809d-b24d4670df3a", "sighting--5bd6a77a-0a8a-4692-8c2d-c3a88e1d0741", "sighting--aa84c055-607f-4ede-aa64-cc771be4d7da", "sighting--d90b8fa7-ac71-4252-982f-2261a0a95bea", "sighting--499ac976-87c9-4153-a4b7-724a58a94f61", "sighting--9b930f3a-ddb4-46a7-afa5-284eb8816705", "sighting--24d75713-8b4d-4d25-bda1-c4931aa6ac23", "sighting--b5b21dd2-cad2-46c4-9482-468bb78c237b", "sighting--21cffdde-33e3-44b9-8288-1559dd2651b0", "sighting--c55a5fc3-01f7-4973-9d79-6a8c90532a80", "sighting--a38b0631-cdaa-41d7-86b7-a80ec155798f", "sighting--519e02f9-17cb-4d39-a453-588f2f29c248", "sighting--f19694a9-ac5e-4468-b3f2-0afb1c253586", "sighting--89461893-36d6-4613-8bb4-630c6b107b0e", "sighting--e0e9fdf5-ec2e-4561-8538-715918974389", "sighting--30f58714-b045-4491-b641-459135f4129a", "sighting--7396b073-cc20-4ebb-9989-66e45ee1e7fc", "sighting--9bbaa4af-aff9-455b-a91e-08c9792b2ff3", "sighting--2fae46f2-8ae6-4ad0-a821-bbc898120aec", "sighting--615f62f8-32a6-46d2-afaa-c77c7dd1bac0", "sighting--06c2bd68-85be-437c-b4e5-0b43f5d1dd4a", "sighting--44d2fefd-275f-435f-97e3-11cc863a456a", "sighting--9fc28eac-748c-4028-b2ec-232dfaf9b0c3", "sighting--ba37f975-24ff-4d58-aa68-52a49648ba31", "sighting--ccaed7d4-6327-4519-9a3d-6336ed1d3a43", "sighting--4d3fdb0d-b8df-49c0-bdf3-db92b40bece1", "sighting--0fe4b194-0ae1-4dfd-a960-55803a2e8c08", "sighting--65b78703-f00d-45c3-a18e-20fee302aaad", "sighting--c602cc26-9ee0-489d-ad44-206a17aa8c56", "sighting--adcda98c-e288-4f31-a035-9c1571f86d5a", "sighting--0ee82902-347c-4145-934f-07ff861361bc", "sighting--9ef725ed-514a-4908-9d92-243f8e7ca55d", "sighting--ba4762ec-4459-43f1-b4a2-017d8c49d3a8", "sighting--291872df-85e8-471c-b0f7-f7d22a64fa73", "sighting--91f47c93-deb3-4605-823a-6389e1e92e05", "sighting--2cea3caa-e40e-4170-ad37-28e9aa7f1d0d", "sighting--2890ca97-db71-403d-b4e3-92796a9786e5", "sighting--d7a79956-0d57-4443-836c-32b9e1d6dbe3", "sighting--9a63a3c9-a3e9-40bb-818f-a3e104cc0be3", "sighting--22bbd1d1-eb1b-436a-8a59-3305c3fa8b16", "sighting--5b82a7d7-66a1-4cb1-af3a-912950717750", "sighting--75a254a4-ea85-4ddc-b3c8-b91787ae4e25", "sighting--bd57fbee-51fb-4508-9486-b9b450cca738", "sighting--cd357e21-0e12-44d9-82de-b05a5068e643", "sighting--235ecdf2-0ef2-4db8-a759-218102e700e5", "sighting--55047c6b-1683-41d2-b500-8e10a7a80556", "sighting--65acf79d-a931-44c5-aa85-a06a3e894f17", "sighting--92093f9e-1d99-437e-b4ba-67df23b32509", "sighting--3bef4f22-5287-416c-adc5-9193c27819f3", "sighting--9a3d2ff3-387a-4547-93e0-2e3ad33f35a6", "sighting--7bb75f9d-23d0-477f-a181-a2adbad2867e", "sighting--ade7788a-9751-443f-9406-d7684f7ffd31", "sighting--2a28b82d-2c41-419b-9f61-799552cdb3f2", "sighting--fc7d23f0-82a3-404c-acb0-dcbbbf37a6ea", "sighting--47525508-965d-4e4b-ab01-2cca1d165289", "sighting--78d18c48-4129-4e9e-afa0-4bf4428b10d2", "sighting--b80d0189-3314-48ce-9df3-a6f7e68e2bec", "sighting--f5d1e604-d275-4ffb-a73c-c1bd93b4f641", "sighting--c55bc573-a66e-488a-9d5d-6daef34b295f", "sighting--53c501e6-60d0-4602-93c6-eee7bbf2eff0", "sighting--9b190226-5d3a-4522-ab9e-62b65180edef", "sighting--313caba8-dab5-43d5-ac52-34640481345a", "sighting--fc9258f1-3b10-4946-96e0-8d4123a13079", "sighting--6e83f226-1585-4bad-8146-96e50c92ced7", "sighting--b38d7070-0d07-46d9-b63c-6080af3711e2", "sighting--96778de6-68e8-4783-ba8d-6b5a10cc2ac7", "sighting--9f301f25-cea6-4651-a4b1-8c3560810146", "sighting--c4087410-60fb-4584-aeff-4c10e8fef198", "sighting--9a2d4407-bce1-4af1-b22d-7c25e969e561", "sighting--7f70e69f-1b12-4a92-89ed-c0ce07b7c32c", "sighting--ae60baa8-58c5-4d2e-ac45-2088d3e051b9", "sighting--01186384-0e9f-4e36-98c7-bed91e8f14fc", "sighting--5a9d3347-482c-4b81-a8f2-56e55f91764c", "sighting--90351f79-5a23-4ed5-b724-66f796c2d478", "sighting--0c2d4d95-fc90-4b3f-996c-79e3210aa4a6", "sighting--823284e2-df6d-4070-b418-61f5901028f8", "sighting--7640bf0a-f402-4926-a2b5-2101022ad1d5", "sighting--8060cf0d-f647-47af-98d1-5f60b9d140b2", "sighting--0372ea51-eaed-4c18-b09a-6ede5a234efa", "sighting--07ea38a4-7182-45cf-b33c-759dda26228a", "sighting--21a81818-9aaa-4975-831f-b50081b2ed3c", "sighting--205a2b7c-9728-4f09-a47c-569b8ec65a65", "sighting--2c86f124-97e1-4043-a393-9a8e6e3d9d4f", "sighting--9694cd39-3e47-4700-817a-59d58984b39c", "sighting--0ec42344-1842-4f27-8647-b99fe68e6e4d", "sighting--ddad951b-e3d3-4d8f-b850-7f68998b458c", "sighting--bfb17c24-51d6-461c-af3a-983f3b81819b", "sighting--b37579a5-9516-4c5d-9e5d-baab9e9bd624", "sighting--b3dd280f-9531-414c-9de4-9601873fb888", "sighting--81076cae-4ca7-4265-badd-18d46016a629", "sighting--cfdc2334-0994-4cd7-96d5-bc4c7308122c", "sighting--06e2d761-b9e9-49d0-8f53-e0b23bfc127f", "sighting--0b0a31df-75a2-43d9-8c59-de3674e046f4", "sighting--0346687d-7f46-4428-83c6-cb6159d01879", "sighting--1ddf8199-859e-4a07-9135-7c001792e242", "sighting--235edf1d-def4-4799-ace9-4a4f0bc6cc1e", "sighting--8f952d21-affe-4970-8c69-2acc48c55826", "sighting--7fd2ab30-d627-4e01-b9bc-47334369366f", "sighting--e62dbd1c-9ba1-485f-b4c0-25d93d78db4e", "sighting--14b245ed-da4c-4221-b296-24638de700c6", "sighting--7a2e86d0-eef7-402f-a0f9-c199c04a4ec8", "sighting--530d7452-502b-4df4-9922-ca4f754895db", "sighting--de395715-8944-440f-af4e-3fcde5a71a3b", "sighting--446b7e4f-f570-44f9-b366-4cf0cba7e9ad", "sighting--1bb16c40-2b1d-47c3-8b91-4b88d980a425", "sighting--39aff001-7aa0-429f-8fd0-02957cec21b0", "sighting--91011831-70a1-44c5-9473-7a0774257df6", "sighting--2c2c25d3-e214-4dd0-a49e-3a3afb4944fc", "sighting--c937ea8a-e068-4eb2-8eee-5a4676684b8f", "sighting--b438d5a1-7a47-4aaa-acaa-70e2c7fbcbfe", "sighting--d01ea987-2af9-4a08-9855-dd26996bb63d", "sighting--1ada4c11-8bd8-48f4-b109-44ac71d5d517", "sighting--ac5f163c-2349-4b8d-9e3f-8c6185e60023", "sighting--7a4edf90-dd75-41a2-8b3e-5988319a007d", "sighting--a1a8d678-efd2-4756-8791-7dc597ba4460", "sighting--4b3282f5-70b1-45f5-a647-dd04cfae6ebc", "sighting--caebf4b4-e18e-47cc-8fe3-aef7459ad5e0", "sighting--afd30fc9-9b60-468d-a639-0f42616209af", "sighting--6c0f9848-bbb3-43c6-bfac-d7f1cc3082b5", "sighting--94d67e72-503b-4ed6-a8f6-1ffd24c116cc", "sighting--5882b500-2e46-4d46-b78d-39d0cbac6693", "sighting--a5cce55f-f17e-4b88-935b-760174c05ba7", "sighting--c48c280d-3117-4898-a37c-4d197185edf8", "sighting--535d3b0c-ca1f-4bc4-bdf3-5c1e88071a83", "sighting--73941ab8-36c0-4ec2-8b56-467db421fbf7", "sighting--e6fcef91-aeca-44eb-a18d-5988068de586", "sighting--530dac48-0ebb-4980-9b96-0d5ae232c2d1", "sighting--291cc8aa-64c2-40a0-835c-3e34d679b5d3", "sighting--35e9aa3f-a8a4-4aa4-8a74-68da708bbe30", "sighting--ee64b6f1-bc9f-4c27-a1b4-1238d1b5ef5e", "sighting--9f9efdc3-0011-4ea7-ab76-f2ad0a3ee606", "sighting--bc0b120e-dbd8-49ba-892b-96d8a4aa4994", "sighting--36510e04-8eb0-4162-b6b7-24fc5611b212", "sighting--5b254cf7-546f-4ab5-aeda-d5c3a93ce2d0", "sighting--566e3c70-e152-4d73-9d7a-0d886810089c", "sighting--ee6bd3ae-fa9d-4ec2-a879-16f37d065153", "sighting--18bfd6a4-d9cb-44ac-ba02-804f4839dffd", "sighting--1dc6bf80-5211-4865-b999-83b923d1cdb1", "sighting--992707cc-e46d-4a27-b086-9493663d8a06", "sighting--ce4f824e-931b-4251-876e-837d75ba65e6", "sighting--10a02474-df3d-4c7b-9c43-ebf0fe80e0a2", "sighting--01de5c9a-0508-4d7f-a66f-a60c50109c57", "sighting--483b35c0-8ef0-4ccf-846b-d92e75a45ced", "sighting--98c79b05-71ea-4381-aca9-cec9ec40da5a", "sighting--21d20ed8-8e7b-4348-83b2-d7b8f796efa2", "sighting--065f17c1-aff8-4703-a430-2950cc14d30e", "sighting--837ea065-bf13-4a2f-ac84-e4a4520e1750", "sighting--c9c553aa-5f46-4d2f-abed-50c5d77d39b3", "sighting--eb41fce0-d9db-4693-adf3-64703469ade9", "sighting--a4425466-9d52-40a3-ab60-593f21284855", "sighting--13515057-d6f4-44f9-b9c0-1b3896d0c03c", "sighting--c3cfd3f7-5a15-46cb-8910-b99512b505da", "sighting--7c0b02ff-52f5-4867-a6b3-2d2452272c5e", "sighting--343b7dad-c538-497f-b9e0-9eacee721dd1", "sighting--e79e5397-07c8-4cf2-b19c-5b7be7c3f155", "sighting--35039606-1b6e-4d4e-a44c-7699a9147070", "sighting--232b95df-9fc1-4f65-a3eb-b2818dc3433d", "sighting--a5d34e8f-fb86-470b-bd55-c05b4bbe5a21", "sighting--1a7e30ce-24d4-4f5b-adde-bf17c795dc72", "sighting--c3ce9385-521b-4442-80b8-aa19a96dfdd5", "sighting--5ceaa95b-ee3e-4181-ba2d-29d64dd61fb5", "sighting--4aaaf3d9-4c8c-4d8f-8ec7-de25992021a7", "sighting--aaca64c2-b4dd-47e9-a361-7ac3cb7c235b", "sighting--96c4129c-7b9c-404d-a81c-7484d64659f2", "sighting--11630240-0347-4dd2-a739-60d43e1654c2", "sighting--6bab2436-4951-4997-88ac-bf14065bb3b5", "sighting--c220b584-5e96-4e43-8e2d-c8394aca5ed8", "sighting--a8752e65-df0f-42a5-9434-1f088247c892", "sighting--b46df9a7-bbb6-41f1-8798-3439318db70f", "sighting--eb446fe3-94b3-43d0-adce-b3b5462dbb40", "sighting--763b489c-0be9-404e-9d0f-4d238a4e1b9b", "sighting--783670a6-32fb-498b-9dd4-3bde299cc35f", "sighting--55868253-31f6-44f3-a1c1-768a7034f65f", "sighting--61c4cadf-c5e7-41c8-9f78-7af8ae9a1b4d", "sighting--9320a22f-debe-497a-bc37-174d17a62914", "sighting--a1c871b5-894a-4a12-b78f-63d71430bf2e", "sighting--4da9f5c7-1cd3-46aa-bf00-eb6893afd509", "sighting--f3825c4b-8515-4d41-af24-c1743fe6dd9f", "sighting--66e16988-539d-4080-8eb0-dc7a29e524dc", "sighting--5d2911a9-b8b6-49a7-9bb4-edfd4a106e5f", "sighting--f90a0fe4-42c3-41c9-a30e-4b1a41c39a1d", "sighting--0ac78832-4c65-4894-914a-223ab4804e08", "sighting--d76617b3-370c-44db-936d-cd3396413ee2", "sighting--6cadcade-ea8d-4c0c-9daf-4a2233685bad", "sighting--890d2c48-570e-44c7-96f8-6b9861cae0b1", "sighting--4382abaa-040c-4897-b7ae-ad2d1b79ed8a", "sighting--7b70ab56-a973-4123-b0c8-be408277b8fc", "sighting--f3405525-8b86-420c-b899-c4eae68179ea", "sighting--47d65baf-530c-4da6-ab27-3b7324355035", "sighting--63c6146f-f766-4173-8511-551cd0ccbcf3", "sighting--8afce19f-3809-4ccc-b9e5-697601f97041", "sighting--18ba5cb5-47fa-4bd0-bcf2-950575e98745", "sighting--b143a7c4-ab0d-4c19-917f-269ef57f246e", "sighting--1e929365-78fe-42a2-b052-65c62ca303ed", "sighting--27c6b902-95cd-4826-99a5-7a853c5dac23", "sighting--8cbaa2ca-28d6-4f4a-a880-d0d6d7060c98", "sighting--1a6a2652-4792-4e4f-8f05-b126f13d565a", "sighting--11c780ee-3545-4204-904f-e7518ca4320e", "sighting--19b2ab41-83fd-4281-b2c1-0c2e603132ed", "sighting--e4f2f87e-249a-4e36-a978-ea13c636acbf", "sighting--1e164304-817b-421c-86db-57f79562665f", "sighting--762d9ac4-fc3c-4ad3-9106-d4a435f943d5", "sighting--a2d06290-da2b-411a-ae0e-23a2588258c9", "sighting--0971637f-ff92-43cf-8e11-c5ac09fe2239", "sighting--4286cb6a-17b1-4eaf-b577-2d039a8f15d2", "sighting--a1906026-7f87-4ae6-8da7-494b984a06c1", "sighting--52046ea8-93b5-4e99-b987-56804923a2d1", "sighting--9d0b379b-a93a-4d08-8e9b-92902b3ec986", "sighting--88c0f062-50ab-448e-9bfd-5ce480323af7", "sighting--99d6a064-142f-4a1d-81d5-6045cd9e8efb", "sighting--8b429983-b4ca-4bb1-bdc4-6dfcc6c70133", "sighting--b34b3bd5-331b-4582-9aad-a60158eb6b50", "sighting--d06d631f-b8c1-41a7-aea4-1a5af16c7537", "sighting--245b1bbc-9054-4501-9557-f84093f8cab4", "sighting--f4faeaaa-e449-4ad7-8114-2ecf9230968f", "sighting--5528ad6e-a873-446c-a0b4-658214c3ede7", "sighting--55b62f29-7876-4763-90d4-cfb8dc9cfb48", "sighting--42aebf21-9985-4409-b2c2-06a3bd9e8683", "sighting--9a3295de-1e27-44be-bcf4-a38274f72bcb", "sighting--bc0bd90a-544e-4c39-a296-e9fb38e6234b", "sighting--5b1a66db-dbfb-446e-8ea1-223b1307c35f", "sighting--7d61e94a-1d2c-4463-96e6-b436a442b5aa", "sighting--36a5cb8f-1339-4aa3-b5c9-3977cdda144e", "sighting--9a08586d-0189-497f-a9e8-1a1dee4c1784", "sighting--85d9a0f8-de34-4560-be60-06e0d84cdaf0", "sighting--6c997be9-baa3-43fe-aa04-04b90293388f", "sighting--71296444-b66a-440c-82de-91dd33ce8e5b", "sighting--b17575a7-61e5-4a68-a3f1-888b2cc42bd4", "sighting--826f5e84-d5b6-4547-9ece-5817396146b2", "sighting--c1b6d700-c7d8-4dcd-8f6c-ea4218a82660", "sighting--d94af473-23b8-4ae6-8d7f-0b88eb867d85", "sighting--1e683d7f-48a0-491c-a21d-78d3ae0c279b", "sighting--c28699a6-b6ad-474e-8e54-256efb3a7b1a", "sighting--3bcc2015-9cda-45f1-9a19-4965ec56d0f9", "sighting--47f6d020-0102-4fd1-a156-ea2e9c37671b", "sighting--2a0228d8-8012-4ce7-9893-edb8c847f26e", "sighting--454428e2-770f-4cef-99a4-da24b5a0adcd", "sighting--98329b91-daf3-4c55-9aca-251f44281874", "sighting--7d80b6ff-4017-496c-84ac-17eaa19dd44d", "sighting--2e17435a-e75d-4877-8dde-d8b4b0e3ea76", "sighting--39c65bac-fbd5-4e2c-9363-496b5884dd07", "sighting--21f384ec-9b22-43c2-bd61-2ba2f48601cb", "sighting--cff237fc-f1d9-4ba9-87b5-424fb5ed850e", "sighting--15b79fed-b31d-4e53-94d3-e57f83d24cec", "sighting--de3d3b6b-526c-42a6-984f-89e4d3a3e989", "sighting--3c8c0b42-e2e3-44e8-be86-d6def7f2028d", "sighting--06b95074-5bee-49ad-8558-a84af53330a1", "sighting--b199c893-accd-46e7-a428-22596bcdbdb0", "sighting--9d94dbf1-05c1-43af-ab81-b8084df347cb", "sighting--0b6463b3-7a8f-4caf-83cb-f4b36539ac44", "sighting--2738c082-117c-4236-97ec-f8360608a70d", "sighting--a7db2f9f-2236-421c-9867-2f5c441ab43f", "sighting--26a14311-085e-4d53-96c1-15cf7a984ff7", "sighting--9d5ba48f-8872-482a-8eb4-504401f7e41b", "sighting--b77c3c21-96de-4cad-a9db-e67fb3516465", "sighting--b8620300-e057-4442-8cc1-bc62a51db2c6", "sighting--7b65a43f-213c-41f5-8441-ab11a5239f9c", "sighting--21e04ab6-2efe-40f9-8bc6-b11a1cc30e0f", "sighting--21c18a46-0ab4-4c5a-8a42-0cb48e98adf6", "sighting--5b8d4262-c41a-4eed-a4d4-1ecd4f238e8d", "sighting--0405cbe9-06cb-4504-b70b-541abe8652e9", "sighting--fbf77da5-320b-4652-95bb-0a763c8d06ec", "sighting--8847ec33-def5-4366-9554-2b6d10b25198", "sighting--fc2f3943-fa6b-4a71-8862-3ef9283567df", "sighting--dcb7d4d7-4579-436c-9dfb-4396c6924ec2", "sighting--ea8601cb-95e7-433c-832b-015df91d79a0", "sighting--9bbeba1f-2956-462f-8808-816c6bd875a4", "sighting--87b94c6c-2f47-48cb-9922-3f2e1e6e4636", "sighting--8539a069-3439-4901-b979-d977a4b07f2c", "sighting--6f6d579c-602c-4d0b-81f4-bbef4d4d354d", "sighting--d2471f9b-3c79-4eb6-94da-3cd3ae374730", "sighting--e42aab53-116f-4365-89d6-dcc4bfa3b73a", "sighting--b264c360-c3ff-419c-a362-02d7fe779055", "sighting--6c03e7e2-cb78-411d-b823-6a7e840d9f6c", "sighting--ed11352f-610c-4d2f-8229-15a4881a848f", "sighting--2952e306-fd0a-48d5-86e0-9c43908b14b9", "sighting--648c6218-9efe-41ec-8251-be63de71f88b", "sighting--e90f167f-725f-4b15-9757-f72349be7615", "sighting--2fe3a296-6998-471a-a97b-9616f5eb3606", "sighting--b39bc2ab-51f0-4008-a1fb-06d476751725", "sighting--af3208a3-7074-47fd-8b6f-6f9dab079cd9", "sighting--2dcf5cd0-af3e-43d2-a7b4-d37ff374aa63", "sighting--92ed0998-2595-4111-91eb-6f1f6c728587", "sighting--7d48d7c5-c787-4d6e-84c2-b18799dd9b21", "sighting--f6f0e5db-b7f1-41c2-8e69-45fc394401f0", "sighting--bce9e514-9851-4e0c-a2b2-73846c959a57", "sighting--0cb585e8-63ae-41e9-b1aa-7480e46326c2", "sighting--f6d9dad0-f9bb-4cd7-a0b2-02c9b643e7d0", "sighting--e3fa8565-5d33-4687-b1bc-110db67974b7", "sighting--3ff33e25-b503-4963-8a8e-10ed8afe538f", "sighting--e96d5a39-a0dd-4fc6-ab8b-27d7dbab99a2", "sighting--ddd37745-5912-4282-bebd-3865e32df8bb", "sighting--babdf35c-8805-4f5c-a0c8-171d918f7829", "sighting--b74acbc1-3dba-49f4-a907-4b9117574288", "sighting--2ae3aa3f-3723-4374-83cb-e97aebc3d5aa", "sighting--0ba37ed9-d92a-4b41-9e0f-d837d81bb08e", "sighting--69a293bb-f4f6-40bb-8e5e-825be349797c", "sighting--908fb3b4-9bf5-464e-ba1f-c58a2763c115", "sighting--e7f953d4-095a-4865-b2e4-bf8c87e68d54", "sighting--4c383514-b50f-4ea0-9093-e71d560fab2c", "sighting--111ad295-f56f-41ae-b15a-0b8fb1b532ae", "sighting--53d04cd3-71fd-4be4-a29e-4ec8ff811691", "sighting--4cc49213-4dac-404e-ad6d-4dea047a2b6c", "sighting--67cc2e33-7071-4b12-b9b1-aa646c1a2508", "sighting--b600a73a-c12c-4e6d-b187-0e081bc5ec3d", "sighting--a4b29595-f62d-42e0-9bea-49217a90a1e6", "sighting--f13ea3a1-f433-4f23-8026-3e77b6e5a0c0", "sighting--f144726f-cb2e-408e-a7e4-7188364bb4cf", "sighting--b04900dd-0fc9-4d2a-bf66-fa81cf8c1616", "sighting--f0e6ee6a-a959-4388-af45-12b0432aa3ea", "sighting--472879d3-2043-45dd-a324-9e6df5eb1822", "sighting--d91b389f-1fb5-4741-b73e-356760f2462d", "sighting--bb6c15e9-6dfd-49cd-a01b-53bab1f4b290", "sighting--8e6b538c-0695-4200-8cc1-fc8b413ed8f3", "sighting--4cbb20dd-3a32-4242-9c31-a0cbae967e06", "sighting--2396428a-2c2e-4c10-b576-4b774efaf1b0", "sighting--20044a57-4851-407f-ad5d-126cd8ff750f", "sighting--096662ad-7e5c-4b8e-9d6c-851a86952699", "sighting--6861ab7c-c072-4926-b11d-93e6f3a6ea34", "sighting--6fdecd9c-cf0a-40aa-a027-48b9645939c7", "sighting--7b9aef28-ecf8-4128-914e-7f63cf025e2b", "sighting--3ec94b39-b500-4902-a86b-6cf0ca6aa08e", "sighting--41c1fa0c-2a1d-42bc-8fa2-86a40ee762ff", "sighting--312284a7-8849-42da-9161-df91363c543e", "sighting--ca5c39bf-d57a-4f82-b7cd-c53b80619b4d", "sighting--f3268462-c19c-4923-88cd-597ea691e1aa", "sighting--ad8553f8-7ba8-444a-9da2-9a9a3b8fcf17", "sighting--28c9dbdf-df2a-46e5-b341-b6b3005884b7", "sighting--fee382c2-8c3c-4f4f-a3f5-5e783716f547", "sighting--5ca9000c-0b10-412b-8d9e-319921cbd93f", "sighting--68e477c9-ac98-4f1a-8227-2ce5def883b9", "sighting--c6f2959c-9fe1-4631-87b9-478bfcb566fc", "sighting--61532a51-75c3-4a14-bc2d-37314f5ff070", "sighting--838e176a-3413-46ca-a570-9eae4a7bf27f", "sighting--f161699a-269c-4863-b00c-6fe9be273b27", "sighting--bce33ba7-2374-494c-8ebf-12bbb4ae118c", "sighting--e5609991-7ff7-4077-9ce7-cf2dfa2e712b", "sighting--b797aaa5-9170-4c29-a5a3-045dcf137833", "sighting--fab945ed-0772-4ddb-bda0-81f148c52ffc", "sighting--440f0953-497d-4367-9f92-edcdda2eae9c", "sighting--08555569-c23c-4cc3-99bc-80baabbb43c5", "sighting--2fc4b1a9-8a6d-49fb-a759-6aa6f22cb418", "sighting--43b53940-8a23-464a-abe3-2a7440ff3bd7", "sighting--4beae197-f79e-4cb7-ad78-19a3a0fa7aee", "sighting--7caad84a-05f1-4c04-9dd0-1ab66208b323", "sighting--65e0f3c4-b434-465f-bab9-d99713cd4b89", "sighting--1f06afaf-f8fc-4173-83ac-fbea8642a195", "sighting--c3a58d6b-c337-4365-b352-3cbc406a7f1d", "sighting--b5482082-4a61-4ce7-82a1-9f13ff633286", "sighting--b526d0fa-0dfd-45fa-8703-9e7366a7e3ec", "sighting--f3f4309a-1843-4067-8264-26e046a56952", "sighting--e4b7ad2a-aa62-47d3-ba70-944f08fbd1d2", "sighting--6c70ae56-a195-475d-b63a-eca8ec2dcd0e", "sighting--f2b98106-0eba-4ed7-95a5-0b679f328c38", "sighting--951122ff-133e-4144-b468-e5db38bd199a", "sighting--dc8a8ac0-a8c0-48c7-8e8c-68cd7ba9f376", "sighting--2a50e3fd-f64f-463b-98c3-bae5b4c4e953", "sighting--d47335d1-c3d3-44c3-80de-fcb8203de8df", "sighting--fccfff84-f202-41f1-8ac1-ad064f0ad5e7", "sighting--50da0370-1758-4652-bf14-80bdd37ca1d1", "sighting--a7f491ef-0e3a-43e2-b1c1-122284c27e8d", "sighting--a8354b28-26bb-48b4-9a84-7e281a6f52b5", "sighting--b227a02c-751a-4c99-bf88-e0ce349d6f24", "sighting--f2daf9f0-9ae8-41a0-ade4-debbcc8a5f83", "sighting--fa22f6c0-4e29-4610-8339-92be3d0f75a8", "sighting--fe0a1253-272f-4d2e-9336-8be4e5cb8db0", "sighting--3fe64af0-6a63-4095-96ff-9657a2fb8072", "sighting--99b608a1-82d3-446c-a333-dd32ccd58025", "sighting--b0787a6e-f27e-409e-8e50-fd8cbeef33f5", "sighting--a7f34d7c-4a69-4d81-9267-a06ca6245d15", "sighting--75473017-d44f-4ac5-808e-8b1adfd9e180", "sighting--ede8b316-3844-4084-8d4d-7f3100d3b783", "sighting--d3c745b4-b54f-44af-a410-7e57308a3373", "sighting--e8323fc5-3a20-49cf-9dd1-684fbab0f137", "sighting--0cf2c0ef-ae25-475a-ba58-b19dc0ca8af1", "sighting--970e5aad-71c6-436d-9a47-8eb2125d8aaa", "sighting--9b952802-ab78-4620-80dd-1da2d4c2b66f", "sighting--e37fe69e-51bd-4f18-9bd9-b43384b2d855", "sighting--527af60d-94c5-4209-a0b8-6f943ea37e09", "sighting--2d3e0ddb-3ff0-4772-8306-e6dfb0a54296", "sighting--f69cc9e3-a709-4fdb-871a-ee3e35e1f046", "sighting--7f790990-f090-45a4-83d5-3daedef51faf", "sighting--fb82e9a5-1dd6-4b8b-8dae-0b11f53358b8", "sighting--38531217-1c82-4a93-aa0e-2c1daea1b7f3", "sighting--6ab9ff4f-4b33-4d45-9cad-9290f4ee98d8", "sighting--31af30ee-bf70-43ec-b1eb-bc3c76976317", "sighting--527e6f11-03ad-4883-a5ea-efaca5e3f432", "sighting--8fe7768b-05cf-47e9-9524-9c7e2b0d4b92", "sighting--620a1fe7-36bb-4047-a4a0-065e6aa75061", "sighting--902b20c9-bd12-42b7-9cba-e468d2300bf0", "sighting--9754da46-5ce7-429d-83c7-4e230e9deb7d", "sighting--7081b7e1-effb-4c2c-aad2-3ee0c8787224", "sighting--8bc73348-4242-46e0-92b0-aea867aaf70d", "sighting--6650f161-89e4-4936-8f7c-b66e0482d669", "sighting--5606982f-8939-46e9-a494-d29d8bbb52b8", "sighting--1d36b41f-e351-4944-9a1b-a60d1e949ad0", "sighting--5e4d087a-8d8d-40c4-85c1-07f7594f0724", "sighting--58e40a32-0f65-4f76-ac02-9024692b49d7", "sighting--60d5eeda-84b6-458f-8131-7964ba0cca3b", "sighting--a0444000-ffe0-41ce-9383-de8f15cdc878", "sighting--a36b1f63-3eed-4b45-a385-d75e6b12643f", "sighting--53767afa-510b-4f69-9562-e37a31ca473a", "sighting--c7876c52-4b3a-409e-b658-45d21aaa9fc6", "sighting--f7531165-de06-41e2-9322-1737bce26088", "sighting--c66f54d3-16f7-4643-bba6-5300c7b4d000", "sighting--9d2acb9a-4d34-4533-90f1-bbf7673db891", "sighting--c089b802-f984-4c22-a64f-987b1ef39e74", "sighting--90940da8-ef17-4484-b2b3-457a25e1dc9f", "sighting--65f1a452-e6ec-4460-b38b-90180f84a21b", "sighting--9c1dac74-f89d-4fff-b908-7d419ff50e1e", "sighting--e403b5fe-1498-42bf-830f-faec3966f041", "sighting--d5b3b78e-5c17-4f78-9842-c5910b4f2a92", "sighting--fb9e259a-799f-4039-885b-93e132940acc", "sighting--60f692fa-bc71-4821-ba56-3a2ebd7a40a6", "sighting--36001692-6621-4291-80f9-4a0f03cdc53d", "sighting--f7bc619b-0ddc-4ed4-bd08-b94a71e8baf4", "sighting--fa077953-b9ce-47fb-9593-e843213fd161", "sighting--d5a99cd6-c5c5-47ef-ace8-9cc9f9bfa5f8", "sighting--b6d659fa-1905-4fc7-966e-d73ddd4583b5", "sighting--69124ae1-543e-415d-bf4a-4ec4fa72fc33", "sighting--03d05767-c0c3-42a4-8553-430541d3a908", "sighting--f0fb9df4-abb2-4b84-ae73-27524e7ff6da", "sighting--f6277752-3c97-41e0-ad6d-e4f30c089666", "sighting--37ac4af6-6977-41ea-99a1-18499e757d11", "sighting--c11a4bb1-5183-4e29-91ca-8888b93e0a33", "sighting--3d034564-b008-46a4-88c4-051844acce51", "sighting--e03affe9-e212-420c-9fc2-a26198823e1d", "sighting--9e742aaf-be9a-4ed1-a819-93af379e3284", "sighting--31aba158-1c18-43dd-9dac-7d0b9336ec04", "sighting--62073e62-c265-476f-b01d-f69d1220477b", "sighting--b910a8fc-dbfe-41e5-a11f-f63d3d74ae52", "sighting--277abde8-cc40-4d7f-8fd7-b6176b44c866", "sighting--c7150bdc-8df2-4794-8fe4-bb031dd0e2ff", "sighting--7f273dc4-4693-4c67-9662-a2ccc79d7394", "sighting--5c0c495b-1d05-4c47-a45d-b2eb146982b0", "sighting--f45ac067-c675-4ace-8ab9-d65de722aadf", "sighting--57df325f-d141-46b9-b6eb-9b920d01dd6a", "sighting--6a19ca0f-7783-4bca-b32e-9c717ea0c684", "sighting--c9f63a68-3e19-4b45-9a16-d80c98a1856e", "sighting--5d42a105-6236-46c3-8858-42caa27b800b", "sighting--4fd75666-d6a7-4358-93c2-3a2fbb5059d1", "sighting--1b879024-6476-4ca6-962d-86e7d4d1238b", "sighting--23f29492-c41f-4329-b2f1-0dba01fac8a3", "sighting--230b566b-d52b-4d23-8ffd-3834f340e258", "sighting--de12b908-cb2a-43a9-a9f5-87fee9e48fec", "sighting--7a2508c3-1070-435a-9423-cc7725a6eb10", "sighting--ebc37cd3-c55e-4d30-b014-3758bb6878d8", "sighting--b7219ef8-c41c-4780-a758-e0f991482bcf", "sighting--5fb95e1b-41eb-426c-a0b3-5a229c95063e", "sighting--8f00533c-fe56-4e6b-9498-265f81d89316", "sighting--0d17de31-3998-4ac3-96e6-d0d2d2a0360d", "sighting--b991253f-eeb4-4d7f-a0c7-bbae5387a986", "sighting--54ecbc6a-3334-42a5-8055-a5016cec0fac", "sighting--8ebcfaf9-0422-478f-b6fb-e03b7a5fcee3", "sighting--aaaef0a2-59c5-492c-b3c9-3550b26e4a02", "sighting--f7a52c26-8c6f-4595-b720-20d748919066", "sighting--167cd680-513a-4cbd-8a3d-9e52cb942f00", "sighting--5085896d-3c1a-4b56-ad15-bc05d7da5422", "sighting--6d86eb23-a3bf-473b-ac65-b8d1fa12f892", "sighting--b60865ca-9c92-4b8b-99d1-f8ad0f6e3451", "sighting--8ca1f1d5-c908-47cf-b493-9feaec1fe988", "sighting--ee2eec40-63e2-4be3-bb1c-ab4bd84faf8e", "sighting--0f28955f-8728-4879-a439-313c47d323eb", "sighting--a1631de2-f865-4d7a-bdfd-fae9614f9a06", "sighting--896c4399-feef-495f-9738-beefb8b1f78b", "sighting--4bc4963c-c472-4370-b21e-4a9e26351666", "sighting--62243d44-9d7e-41e1-bd17-d0dd59b97d99", "sighting--3728eee3-a3de-46bf-aee0-5689d5838da4", "sighting--18bd183e-9881-421a-8987-71c04de6a7ee", "sighting--1633e2f6-066e-4d52-8175-bc212699d767", "sighting--f00b7df0-7f7c-40e8-b6b9-02e9bc2848bb", "sighting--d63250da-7284-4b27-a57b-1e7dff7bfcd7", "sighting--53267ae3-9ec3-4493-ac9d-138641e61fb5", "sighting--c464aca5-16f8-4b79-965f-32182ccd4740", "sighting--22d22fae-21f4-4df2-a38a-ce57d69857ea", "sighting--8a094fd5-7c15-481a-a820-45fc0120cbcc", "sighting--f7ea1823-9742-40b3-ae68-0eef4e08d00f", "sighting--f1896a88-c799-41f9-b96a-d5396a1a5a4f", "sighting--95dabc83-c6e4-4146-b476-329098dd45b0", "sighting--e508e34a-2943-4335-a800-b0426ad77f1e", "sighting--e91f074e-3cc5-4c76-bbbc-8825ed411815", "sighting--e492fa4b-f075-41fc-94fb-123928e83a38", "sighting--2f072ac2-5785-45e8-ba74-0be2abff8181", "sighting--2e1705fd-ec07-4085-8ba3-e70186ae7892", "sighting--14c5e2af-1ab0-4556-9a0c-bed07708ba66", "sighting--69de3c3c-17d1-436f-b563-421a9c0568fe", "sighting--db8d6bfa-fa60-495b-9be1-284ada03f7a9", "sighting--3d6bd954-15f1-4f8b-931a-19589e3aa6d5", "sighting--45cf9ad6-d353-45d1-a4dc-827ca5508ef0", "sighting--eae10cd0-195a-48b1-840c-ed0116f85d81", "sighting--12db8fcd-0c35-415a-a64c-9537807a1d23", "sighting--e13cab79-0fc6-4664-9a52-2d25a4aea1a3", "sighting--8927e8c1-cea0-45f6-b991-7e50799d73cb", "sighting--5b7173e5-4317-4587-b951-12fb33dcc6d6", "sighting--11783287-2707-4fe4-b081-a654fa6bd041", "sighting--ee2a1d58-381b-45db-bdf5-e6c70e7f7e4e", "sighting--6229622a-8145-4643-ae97-ddfdd3183e07", "sighting--24916932-f31a-4419-bc82-949931c97b48", "sighting--bb0540e4-18ac-4c2e-abc6-07c5c2cdae1f", "sighting--a5cb1ea7-8720-4911-bc49-ef8f142ea654", "sighting--a4b54734-9fcf-40cf-824a-12e69c9719ef", "sighting--18b6fe78-3771-4ef0-b9fd-f4d0c397e1b8", "sighting--25bb4362-77ad-480b-863e-e444ac6006a1", "sighting--537da00b-f1cf-44ee-b75c-82da6d74b79c", "sighting--4edf489e-c0c4-4dd2-843e-fab6b0b90a26", "sighting--4d7815d7-6b31-4f7b-a48e-2bc553f6f35c", "sighting--cdd10022-1044-4fb8-94bf-d8759e0ac324", "sighting--5c8b7948-fcaa-4fb1-8279-00c05f735969", "sighting--52fc75fa-0717-49ca-bffe-0e936ef34e3a", "sighting--b26026d4-f6a3-4356-8ecd-e0d284ac16f5", "sighting--87b5fe05-0498-4cae-b20a-bcf5216f6723", "sighting--71ed8336-bb67-48cb-9938-4a72eb489ebd", "sighting--af29d74e-9108-42c1-80fa-1ab2d96b45cb", "sighting--86b7179d-b12e-4416-a3b9-22bd9e0c1cb3", "sighting--815dc6b1-2e8f-4771-9df3-f64e20866d97", "sighting--53bb8be1-ae88-4ae3-8a86-7e4858394016", "sighting--17cb512b-3c75-4a77-be3a-a847cb1d2698", "sighting--40ce2314-3924-4a24-bdcc-8998c6ccc4e4", "sighting--b31452f8-d545-47e1-ab11-08188a4a0a81", "sighting--d727565e-a75a-4f14-9796-85597c9a27b3", "sighting--c973281f-06c1-4910-8390-af1c6e0f5658", "sighting--31812bf1-2658-4d27-bebb-f93a95860a20", "sighting--621d01ff-f917-41e0-99b9-d5adc57e83c6", "sighting--1349a221-5039-4927-9e54-64d46beb3210", "sighting--eb2758a5-e464-4f2c-abd2-8baa3f3f25f2", "sighting--d6384008-651b-4503-9769-36d4a176d17d", "sighting--36968420-6fb7-45e4-8db8-c02b23a9c71d", "sighting--72185938-efa4-4e41-b2b0-68f353889954", "sighting--fb11f176-90e7-44eb-a501-be966a31a3d9", "sighting--f627a05b-341f-4b78-a22b-24fcedf4c5ff", "sighting--5c435b1a-4bcb-41aa-8100-dc25482b0d39", "sighting--be9484ce-2844-4e2d-9b8b-a70e4a31f59a", "sighting--daa92945-f42d-4341-8dac-bb082067679b", "sighting--ccfd7eaf-cdab-409b-9676-f6d54a73fa88", "sighting--5399788f-f2fc-4354-a8a9-291f046144a3", "sighting--72094165-74ae-45d0-a76e-4800f03fef47", "sighting--484a2f4c-b578-477b-b091-f01499f75c80", "sighting--96506528-76fa-4f14-9c8b-ae4aa49529cf", "sighting--c75e9967-5e2d-408c-bb46-65cc80e92c7f", "sighting--8957f693-548f-45a2-979c-690b821a96cf", "sighting--4ec5431f-b207-414f-a5e5-a8773a127c71", "sighting--f39ad799-076b-4cd3-983b-d54dfdd7c3ae", "sighting--a7c33456-d548-47e4-9073-b5a1498df940", "sighting--4d83f004-880d-477b-86a4-4d86ed69f2f2", "sighting--5f3059e2-aa08-4d5f-ac10-bfa67f8a3bc0", "sighting--1266e5dd-b0c4-4d02-9c7b-8140f0174d58", "sighting--e46795ad-1f82-4658-9a2c-58e07302b9ce", "sighting--d3566240-3213-4d70-8ec4-5e81ebd4f0e7", "sighting--09a13d3b-1eb5-4d17-84db-1ac6e29693cb", "sighting--426589b7-1a1f-452a-b1e3-a1ac209d9d5d", "sighting--e2880920-f1c8-48f9-bd32-21af9e6043e3", "sighting--f61a00d9-15d2-4be3-9cb7-3a06902c7113", "sighting--09f90c35-357d-4316-961d-d84b598c5338", "sighting--b976994d-0a7f-4bd4-a17f-de478856f7fa", "sighting--aa811224-f68b-4a3a-bee3-2639201093e8", "sighting--f7f6310c-1256-48c6-a972-ca4214d648e7", "sighting--37e81277-453a-4e16-9492-d1ff33060158", "sighting--c098ecef-2baa-4151-8977-a1fa5fb3106c", "sighting--e649ec31-b34c-4987-807e-137f00cb8f78", "sighting--9fbf04e6-8de4-4714-af08-c9ca272b55f0", "sighting--d08f25de-02f7-456b-84d1-9637c6e8a6c2", "sighting--0f3b6da9-f664-4094-afeb-e630736a46a0", "sighting--a53c1436-d0dd-4922-9c3b-e3d16e272ed8", "sighting--397763b0-a38c-47cc-83c5-85a1289d2e04", "sighting--cd55a4cd-87b8-4363-a136-f9b6e1f53289", "sighting--6650b344-b836-4d68-9578-41b6bd7bd259", "sighting--8186ce6e-04e7-4121-9584-3c6db6605844", "sighting--df241245-6999-4a59-bbca-f627a91e0d63", "sighting--8e277771-20a3-4630-9001-6fbc14cd029c", "sighting--0326bae7-d70c-40d0-9f46-bc3a6dfa86f0", "sighting--f911c273-7f3a-47cf-8f73-d198fda28f12", "sighting--a8b2f504-a632-41cb-bb36-ebe8662dafa8", "sighting--282074f6-c730-41a2-bdc1-b39b96712bc6", "sighting--7533a300-5814-4608-afbf-73e59a1bb826", "sighting--1932d65e-236b-41cc-ae12-4c18769b8818", "sighting--a8f86170-ea19-46a6-9d74-9fe781c73362", "sighting--f08cc70c-33d9-4d06-8758-d423fbd25f6a", "sighting--b573faf0-26f8-4490-bda3-ac3bdf9fd01f", "sighting--2d4520f6-f04d-4c2f-81a9-94154d159569", "sighting--ec347ef5-9df7-40b5-849f-cea10b521938", "sighting--ba4a4d5a-24f7-48da-9b4a-999b2d855cf3", "sighting--1422b74a-824a-4840-9abd-6d9f9c1962cb", "sighting--0eb9c4c3-ea09-434a-aeb8-fbf2a437ca8b", "sighting--3ca32a31-5042-404d-b981-8a1e2e0d2cbc", "sighting--ed682574-a597-4561-9e48-1e0e7f83a6ea", "sighting--e66f370f-93df-48a3-99dc-20d7efe92133", "sighting--e20fac6c-7f87-414e-b8bc-5193e488e5aa", "sighting--578cccee-12c5-4b5a-9dc1-bf36cd190caf", "sighting--6c8a623a-0340-40aa-ac7d-e69b74a7921f", "sighting--8ca20ff6-98c4-4187-a56e-b018234868bc", "sighting--20fb86e5-a3fc-494e-b723-0b8239db5d9a", "sighting--3cecf5a2-6155-4f79-983a-57efd35961d2", "sighting--18ea0c9d-8185-4245-97c9-6001a2f4356c", "sighting--28f0c64f-ba81-4a2c-a956-3929ad0fbb9f", "sighting--95898b57-73fb-49b7-b5f9-b1846c40b9f3", "sighting--a8dcb4e8-85f5-45ca-be6e-3631b26f3ce2", "sighting--07e0039b-750f-4299-ac3e-c0b7a75a6419", "sighting--07182bb5-aa67-4bb3-a437-77c5d6843c34", "sighting--c7372547-720e-4d4d-825a-27fd3d628eb3", "sighting--4c1beef0-be91-4af0-a534-8d7560138da1", "sighting--7bdfa29f-e5c1-4eab-b886-cecb4b124057", "sighting--78023ae9-f549-4f92-964c-908aff7ca9fd", "sighting--9d17551b-c01b-4c5f-a7ef-e23930e48d8a", "sighting--f058d169-4f29-4c56-8373-a25aa14e989c", "sighting--8f4c56d4-8c0c-4e80-ac66-0354104d7177", "sighting--d97e2370-b3ce-464e-a247-8b5aed519868", "sighting--a1f1a785-592a-4830-9110-71e4b0acfe4a", "sighting--62faf19b-dc11-4b6a-9ce8-b52a1c0b7ae8", "sighting--02e32eb8-0920-4812-865a-035818d90aa8", "sighting--2b52b436-081d-460c-9b44-5c4738fc6c41", "sighting--e35d7f48-b9a8-4a03-9545-12347009442f", "sighting--f60f70c1-1d47-47b3-a511-8806b8231277", "sighting--942d8440-3f96-4af4-9906-1f3fcb9b95a7", "sighting--896b645b-5c18-4ced-ab55-adad6f37df92", "sighting--89efebad-1a24-49b7-96c2-076623f3ad32", "sighting--c53de3e7-f213-4ff4-9ea0-42692a2c3a7b", "sighting--79e5f62d-fd82-4994-9730-ff5600cb0360", "sighting--01e72dc2-92d4-480f-a9c4-da8850f07ca3", "sighting--ac4927ec-1c68-423f-93d9-a5f05e79ec47", "sighting--4e21c14e-8e70-4c38-8917-8eaf788f1b5f", "sighting--45277f80-55a5-4b1b-9809-9373dd1a792b", "sighting--5bf4a14e-6b18-45eb-9cba-5bcc2e921a58", "sighting--c254bb43-001f-4998-905c-e3d4f3ccd903", "sighting--7814d302-fce9-41da-9acc-25c3e085fe2c", "sighting--08a32c04-d32f-43fc-88d8-15f30bc10cd5", "sighting--7267bccd-2925-4e7f-86d2-93722cf747ef", "sighting--443a2528-ff2d-4fa1-aa55-a291d264c452", "sighting--8281a5b4-45be-49c6-bfb2-a15d08600ac9", "sighting--99f7ad2b-27a3-4489-978b-991f6311ec5f", "sighting--e2e9b021-e409-4365-99f9-2289b6d1a589", "sighting--0fe15ab3-b399-48f1-92f2-e251c32583cf", "sighting--2504d216-e078-4dd1-9e20-55097e64f8b8", "sighting--0738601f-8b62-45eb-b934-8338917a8c84", "sighting--f0b2779c-23ff-4083-8d3b-0eaa033476fb", "sighting--7f1aac1e-71fb-4576-8ec2-de0228c5686d", "sighting--437191f1-442f-4739-b81f-0cd7d49dbe5d", "sighting--bde1eb75-2d63-4ef6-87dc-e44601fbd62d", "sighting--f7c7a3e6-2a44-4fbf-bb55-54bab00f031d", "sighting--efeef0c2-bdcc-4a38-bd0c-62824848c8e1", "sighting--4a13617a-2bc9-4efe-8028-27f587ef9ed0", "sighting--1b48dfba-43b3-4c23-88c4-120ab6fabccc", "sighting--7ecae208-907b-47cb-ae72-03adab2d420e", "sighting--7d21e509-bef4-4a57-a0e0-1fb578add174", "sighting--9f241d42-7b1b-499c-ae71-02932fe95220", "sighting--2c95a2c2-a1c7-463e-a172-e7c54b6e6fb3", "sighting--3327c24c-639d-4d19-a8a0-5c81944034ed", "sighting--a6ffdad1-ca15-40c5-9aaf-1965099cc6b9", "sighting--e153d071-e8e3-4c2c-94e9-950f118d497f", "sighting--390d16c4-ec64-48db-a4a7-87b5417a0e41", "sighting--024185aa-0d53-45db-b084-8a1fd0c71010", "sighting--7649e9d5-69c2-474f-8612-2a23ce1e3c4e", "sighting--9b36ee9d-96d3-4dcf-8b20-db706eba5b5c", "sighting--b5b88456-b301-408e-82a9-36944f347695", "sighting--0cd68fd2-1330-4ddc-9ec2-2bc13087d74e", "sighting--d4b7bdbe-0980-44bb-ae76-b674d02452c4", "sighting--f9e7ff94-1c27-4688-a181-56dde40465ae", "sighting--9e056dd9-8657-4e10-b66e-4f6a21687f79", "sighting--90dbc0b5-c480-42ce-9baa-b2a2b8365126", "sighting--2ca3d1c4-301f-4536-a469-d73e490ece75", "sighting--ab1a7e0d-8225-48cc-af4b-2b3a387b11e7", "sighting--5056e5ba-89c8-4971-8f04-7a3427479e50", "sighting--a87af730-2019-422d-9668-afbc48a5dda8", "sighting--6394f581-5b15-43e6-8959-4e43fc26180f", "sighting--691c9f42-7329-4ba2-9ddf-2305560d9d1c", "sighting--b8ebeb3b-dccc-4006-8ad3-84d5eda3750b", "sighting--39379815-a451-41a0-8c32-6672ea6b12c8", "sighting--6cd69642-3c1e-401e-a6d0-de62f20fbe61", "sighting--616ea01d-e211-460b-b721-352217c34af7", "sighting--d97d0a03-5443-4fd5-9e3e-66ed62438728", "sighting--6c9d93e1-65f0-4412-a293-0ef0158810f1", "sighting--5399a566-7e70-47c2-90cc-653c19746d94", "sighting--1404789e-b429-4f1d-83e3-b3bbb8a7a8b4", "sighting--828a06cb-8718-4599-aa87-a7834623169c", "sighting--28e9e49c-a5d6-441f-8078-c970a12d6a56", "sighting--92278ffd-8038-4e2b-b147-a284c4990404", "sighting--c4863123-dbfe-4c81-aaf1-1494990f34a6", "sighting--7c0377b6-5457-4123-aee8-5f1aebf2d339", "sighting--ab03b9ce-3875-43bb-a409-bbe0f86fb099", "sighting--2aad6a89-cfe9-4aab-bfb3-1fd944468612", "sighting--080f6b41-7ed2-4018-b932-8f07dcd7ce68", "sighting--55e9a745-fc9b-4b76-8475-7a62595eddc1", "sighting--ff6c15bc-d784-429c-a489-e4772556ea8d", "sighting--15c16c79-ee13-45aa-9179-67a2432c5e85", "sighting--1ee94c66-0ced-4f9c-9c63-a9e162d5b227", "sighting--baa696b5-5527-4ccf-ab8c-4c4a4716d379", "sighting--ba94209d-4c0d-4b3c-ba42-7751d1f2c9ec", "sighting--a898666b-6668-4c43-b467-8eed13dabf58", "sighting--22e70786-a299-43b6-a4a9-74ee3e923b27", "sighting--76b71624-1d5c-4c15-a6d1-c41109b59708", "sighting--57c6a29d-a14e-4a01-a7e6-8e81ea9e25e7", "sighting--2a7c023e-a458-4f24-8855-386653e6d374", "sighting--45dbceea-0f80-452d-b906-4d9aff4d18c0", "sighting--d9c2dbf9-a506-4775-b07a-02bed715c3a3", "sighting--6f3d08e3-eaca-48c6-ade4-99371125722c", "sighting--498211fe-5e4d-4d0b-aa18-1597de404bc9", "sighting--c5735401-cba6-480c-991f-bbc7536d68c4", "sighting--cfd8c178-2ef2-4daa-8867-4ba4cd85561c", "sighting--15290dd7-11bf-460a-84c2-39ad5a713b2e", "sighting--a3c4f2fe-0c87-4a4e-a40c-68fce5f0603c", "sighting--fb684f21-633d-48a5-9b4b-15b517f60e68", "sighting--37e211fb-3e10-4a06-b811-b3edf06a0848", "sighting--ed521197-7343-45ba-a7c6-97b2db95877e", "sighting--154f448d-5ed1-4838-96d3-8d121cf64701", "sighting--8d93623b-99d8-4b6a-bbc6-91564233f2d8", "sighting--fcd13174-7a46-4ffe-bfa4-66dd0c346127", "sighting--aa7d7d1a-c79d-4e16-b018-7218902aa7a5", "sighting--c7375ed4-32cd-479a-b190-f8639140e021", "sighting--7d4bc9f6-13da-4ce5-abc9-f7c5c62d9fdf", "sighting--8db043e6-7ec5-4284-ab03-ad1d36e3c66e", "sighting--95651646-451a-490e-9826-6ed26c02606c", "sighting--c762cda2-da15-41ba-878d-eb04a28cc83b", "sighting--574bef64-7490-4613-b9b5-0bd8e2b2abcf", "sighting--1c689c7c-9144-46e0-aa1c-0241a961dce1", "sighting--307e4e52-df7b-4ac0-a456-4faf846ccb71", "sighting--e9bd7eb5-d1fa-4f4f-beae-a077060e0abd", "sighting--6a97b2d9-b5a1-4818-a990-06c995c7b2c7", "sighting--82063686-82e8-4594-b8d9-7615661a018e", "sighting--3d74162e-b0c0-4edd-87b5-aa5f18d04f56", "sighting--7237d4c1-dca1-463f-9ede-20236ab206ab", "sighting--db929d67-f41c-43a4-acc0-b175cb37f485", "sighting--cf73a69a-8ee4-43c8-9933-883abe1c5ea3", "sighting--b18a9a7e-d935-4d9e-af76-593b26f32a05", "sighting--5e18785a-4dfa-4329-a9a8-2ce79167a3dc", "sighting--a2a20c94-97c0-4fb2-987f-9b8715cef14e", "sighting--82710b88-9716-43d9-a299-9e5a4a5ddc4a", "sighting--bba91046-14ec-44e3-98b2-ea05940fb25c", "sighting--da2c7bfd-d99c-4223-aad6-08d993363cdc", "sighting--fd392ae8-76c0-43bd-9003-be31d87c3787", "sighting--6381fd67-4ac0-4a89-b783-435ba6775019", "sighting--0b1fc44d-2582-4d1d-88b3-7d5592e31cb8", "sighting--787dcf5d-077d-49f2-a461-d9350f428508", "sighting--dad8268b-7e5f-4493-87ce-9f0f74ac584c", "sighting--5cb25730-aae9-4526-90fd-a04c0ff0e802", "sighting--d0361181-6f19-49b8-a014-ff3706a015da", "sighting--e04d6df8-0503-40b3-9a19-a69ce41ce981", "sighting--bd5f6f53-fb49-4977-aecd-a9f1915d0534", "sighting--ae7bbb2d-9083-4c26-97af-12507911907a", "sighting--0a44faf5-3829-476f-8a76-9f25a8aa94a9", "sighting--cf88c46f-9b73-4298-b5ed-11c600b02175", "sighting--fcf6c5b4-5c75-4a89-82bd-1877c6675910", "sighting--a884b2c7-98bd-41a3-8a05-36d7dfbc2140", "sighting--6129e093-a3a2-452d-8bc4-6c3fd1d16f14", "sighting--e55a3275-8e34-40ff-b3ad-6d2dd5770a0b", "sighting--639e52e0-ed23-4b1e-8945-0d2e19cf7866", "sighting--0856e484-7958-429a-a3bb-136be72ff5af", "sighting--11735fa5-4766-43eb-a3a2-25c0e4454b95", "sighting--d4d6e405-e9c1-44d3-936e-da61d64860f6", "sighting--b8f9ee80-7aec-4183-9df7-16ff591e8f50", "sighting--d5b57f28-f9b2-4d0c-a2f5-7f570f412284", "sighting--bb010b8e-cfb7-4d90-8b3a-e0d7309e50b3", "sighting--d65836e3-9a1e-4fd7-b718-7812dd45af26", "sighting--acd7b134-0737-4f58-a3d7-f8450325b5cb", "sighting--deeec96c-473f-466d-96a5-b59e0fa14818", "sighting--28a345d7-d2f4-4620-974b-9d0a1df953e1", "sighting--2f327b7f-4192-4370-802b-e26435856117", "sighting--a6056e6e-2c2a-4de0-9359-8fd3ce6533f8", "sighting--6cbf2de9-81cc-4f52-b580-1e4a782e3bfe", "sighting--60cc8121-0725-4b86-9764-44c2ee59c4c7", "sighting--bc0af6ef-e16d-4a16-82b5-569b83fafa1c", "sighting--40321b05-a4e2-481d-9adb-02f33d2f5d82", "sighting--64c0c131-fb26-49fb-bf01-7b652392fd95", "sighting--b3bde070-afe4-4f57-8fd2-7e865ba0ea46", "sighting--a3f7c363-fb7d-4e6e-9768-a614a6bc5457", "sighting--7d58d303-c511-43ea-9dc8-c182d9c28332", "sighting--dd3d18be-f1bc-486c-881d-1a521f31c8bb", "sighting--7ed696f4-8f37-4d59-9210-697c3abb020f", "sighting--d6de8492-9b7e-4d56-9309-1ca35b462461", "sighting--df678643-8b38-4da8-be52-ca0da9868cd9", "sighting--4c8d0c59-76f5-4493-897c-b2a0e865e5b7", "sighting--6e6cc035-5d4a-4e02-b4ee-cc413b05cc53", "sighting--7a8deb39-c3ff-4015-9c3b-0a104acb0e7e", "sighting--d4ab4d37-14e1-4039-9811-5cf14a25ac2e", "sighting--fa2dcd0b-42af-4f57-9f45-80ee90f51fae", "sighting--33424a55-8278-4014-9c54-06a2c8d20795", "sighting--30c1cf37-07e7-4efd-bb5b-00ee44104a90", "sighting--6d512d10-560a-40e1-ae61-c040650ded10", "sighting--5192fade-5dd4-4c90-b48c-9a190a5e0ce1", "sighting--90ffb184-d5f8-405e-978a-5cc54d621757", "sighting--17dc7bf5-7d4a-4098-a219-f1b98a821805", "sighting--28942d5b-bb07-4b5a-99ff-d0e609694bae", "sighting--8d2e729b-5b70-4e4f-8ccb-d709d8caf06c", "sighting--989e6516-1e89-45b4-a487-87623e50c35c", "sighting--65d2814d-0e02-4dff-9bf4-7ce29f7b6007", "sighting--3b89d8b7-3c31-4dfd-9c4e-631591ecf0d8", "sighting--1586a8b6-e5bc-4fed-9f29-931e7edca063", "sighting--7d70c48a-8814-464d-b6d0-b86d5a0bf6b9", "sighting--4b598d4b-5bf1-4dd2-a33b-078ae01a3801", "sighting--e8527961-7491-4edd-ab5c-26f6669bd3c8", "sighting--8080ce1c-18d4-47d8-b7dd-2130e65c1bcb", "sighting--0c0ab816-95d8-4cbd-83f3-49d2fccb21ae", "sighting--045e3adf-e327-4628-888b-efe3581e0999", "sighting--8056ba71-cfaf-4542-96cc-5ec92a1c3969", "sighting--2a3d5caa-0ea1-4f12-89fc-49f1a4ea5b49", "sighting--ceaf328c-1bdf-4710-b30d-b0a8b588db15", "sighting--8c37d422-3d8e-40fb-a6e6-a08278f837a7", "sighting--e43a8486-03f5-4360-8d01-c7583b689b2e", "sighting--d2736216-568f-43a1-b873-f1cd6611f4f2", "sighting--4258eefa-464e-4f3e-8ab2-8ea945ba3cd0", "sighting--d011ca7d-87a6-4b5c-a0f9-7a21e0394f8e", "sighting--2ef2369b-b313-4924-a51d-d9a46d1ac3fb", "sighting--02e8aea8-ccc3-49b3-aec2-d1c4bfdedc30", "sighting--a434d09d-f8fa-456c-8070-daec1189cde5", "sighting--11f11946-c568-42d9-a018-8e04af8e0bc7", "sighting--01b3cc98-7338-4a1f-ad31-90ef3fcfb8c3", "sighting--276ecb8b-91f6-463a-94e4-6a1c0b06e35a", "sighting--165f2da7-f6fe-42d4-b7ed-dc7b7ef74cfa", "sighting--c2c5d489-1612-40d3-894c-104a14ec2990", "sighting--326fad32-081f-4d84-afef-87145b865a3f", "sighting--1eb8d2f5-9027-4237-9206-f22c909880aa", "sighting--f661398d-0fe5-4c8a-aa6f-5aed4fc57e0c", "sighting--9ba4ba2e-9158-4329-b51b-3ee763db79fa", "sighting--a4790b73-c23e-4101-adf0-d8ccc5decc0e", "sighting--a3ca5692-b71d-4e59-900e-93b6a900e825", "sighting--1356702e-c57d-4402-a5e6-d63814477cee", "sighting--bdef0303-3798-49fe-9cdd-6caf901be6c1", "sighting--0e75e953-8383-45e5-a281-9afa438e8f8e", "sighting--674ad544-9cb8-43f9-b008-a048baa0fd42", "sighting--46074cd9-4cd3-4775-8eec-6e8990b1a720", "sighting--fdb5cac1-dcc5-4773-8e63-414865b869c5", "sighting--c3af329b-163e-45ea-aa67-151447d63d2d", "sighting--17d7250f-381c-4637-b27f-f2be382a3e31", "sighting--0de9c703-cce0-494c-9000-8fb2345e355e", "sighting--d9609d14-002c-4e60-b598-10c639060215", "sighting--679f25ca-3f88-4968-8dd8-028aea62e279", "sighting--628211c2-ebdd-449a-a085-8bc87f87e17a", "sighting--124c451d-c99b-46dd-b969-71a1a5deb693", "sighting--1eaa91c8-3a75-4401-8627-48af52df7d7b", "sighting--21e3bc10-61b6-41cd-ae2a-480f6dbf20a0", "sighting--5d3a4241-99d8-4c39-88dd-a15e4d0a6073", "sighting--cf2fbcad-d5ce-49ec-ad1c-1a7de3291ea6", "sighting--694182ff-b213-42a0-8953-c1ebb46271bf", "sighting--9a3df2f1-2ca5-438e-8041-e0be55f0ca99", "sighting--cb5bcca7-793c-4224-9f80-484a093c6410", "sighting--3a2c03f2-3182-4234-86db-b58cc0427231", "sighting--04fb6cf1-9345-4b54-a8c4-b2630c8a96c9", "sighting--58511f38-e06e-4e0b-a933-2726378bf903", "sighting--7e7094a0-3158-4e29-803f-e77e9a47b82e", "sighting--513b1ff3-5c8f-4ac3-8666-aaf8fc723a01", "sighting--37091b27-fb1e-4491-8060-e01c6c0855fe", "sighting--c7f44e62-ead8-460a-a5d6-45a2b706877b", "sighting--7a9e6867-b0ab-4012-8044-5a528b063563", "sighting--a11aaf54-2120-4056-958a-26b4a677254c", "sighting--ecf0ba05-cbe7-42cd-8ca1-b837effbea6d", "sighting--cd1a999f-9f61-44f0-b985-43fc48ca8ea6", "sighting--aae3d8a0-53c7-4674-aa97-b497cf1ab7a8", "sighting--e5931cd4-ad67-4710-9fa3-7870c75f1c32", "sighting--310b451c-fc6b-4de8-ac17-e2a9fd4a9735", "sighting--e6b7523e-935a-4d15-9ca7-dedec88b5c77", "sighting--9428019e-a7ed-4060-ac86-f51d69181b49", "sighting--d1a1c6a1-b99b-441c-9a9f-da326d6785bf", "sighting--a063243d-6954-4b67-bfec-9c4f089f8208", "sighting--74e318dc-c45c-4485-9b51-51678820ae59", "sighting--7da5ebf0-8fc5-4073-b69a-d013a113bb4c", "sighting--8f668c86-7d71-4302-ad9d-90789550419e", "sighting--afeb9996-2bf0-42af-8673-168bbf631f02", "sighting--a3433c92-46f7-471f-a861-3225a217ed13", "sighting--26b7376b-27e8-4330-9c62-83dd47f281ff", "sighting--fa6c7ecb-d401-4367-89b2-baa6d392ef4e", "sighting--230245fb-8b71-45fe-a8f1-3acc28ac54eb", "sighting--61957873-5e34-499b-9613-00ce58344428", "sighting--3518d16b-a81e-4f11-821b-74938e82e131", "sighting--b976bb7c-a530-43f7-a910-47d07897fedd", "sighting--fafad544-f0bd-4e7a-a32f-04c90b5629ca", "sighting--397eff7b-20c5-424b-8e73-ee31b3db2f62", "sighting--156d5187-acae-4461-bdad-c4016f6010e4", "sighting--a5850799-e7d1-4eb0-9ee7-577c95aab854", "sighting--e04795c1-7edc-4a66-a045-6ec469e58aec", "sighting--68e55789-d18e-46f2-b131-0305175099cc", "sighting--e09a5bbc-bff9-41b5-ae20-51c80bd6837f", "sighting--ac38356f-0c3a-42ce-b214-948e116d727a", "sighting--daa9510f-8fe8-4a2c-850f-8998d14cd85c", "sighting--11a02ce9-8bd7-4522-a565-396bdab6a9e5", "sighting--6ed92b6a-ea09-469e-af00-18da098301ea", "sighting--073ccf01-1427-4992-85a2-cd0784cb91cc", "sighting--f09555aa-e8b5-4b83-8eb0-9a268fc8b88f", "sighting--630d69ef-eda0-4c1c-8fa2-af4ea07ccbe1", "sighting--b9697857-b1ee-4aee-8898-43f061dd73a7", "sighting--a456f25f-8b56-4589-9feb-98102c789447", "sighting--156ecf47-8d12-4d97-80d0-4384cbd8fb40", "sighting--ea4ad5c3-aac3-4bb0-8297-c7f6afe53d73", "sighting--33da250b-8ee2-48b9-a62e-8189b720c036", "sighting--1228a312-0121-4d10-8393-7745231d0c2a", "sighting--bf080290-45a4-4ea5-8748-9d388f1a985a", "sighting--99f391ad-b3a9-4342-a6a5-21d8a6329710", "sighting--ee11cc7d-a044-46d1-8f1b-1a9f025ef7ab", "sighting--83f5c8a1-4425-404f-a5a1-528e1823f6db", "sighting--a29eafae-ff12-414d-9d13-7de384d36d33", "sighting--2de6321c-fbae-4579-bbab-16d140c9e33b", "sighting--860a8c59-a62b-429e-b261-31e2aaa720cb", "sighting--fc93ddbf-f0fd-4558-9b34-e67eb1273108", "sighting--e5e8f60f-1bb6-4613-9603-7565b472ae8c", "sighting--ad9c25ad-350e-405a-b46c-5eb6cabe1f99", "sighting--b1e6ba81-1617-4a70-a76d-0e38a1ad1336", "sighting--364eb80f-dbde-4bb1-96ea-f0bea8fdc04a", "sighting--2c57705b-f91d-4a23-a967-2c36bd57af32", "sighting--5edbbc15-378d-4267-9791-62c54c0210c9", "sighting--f5c707a0-080b-4876-9bd6-8f5fc7e934e9", "sighting--7667ce13-60ef-4dc8-952c-b9502fffb9c6", "sighting--b9779e5d-5162-40e5-a396-07dea674ff10", "sighting--20f6192a-0441-479a-adbb-c1578619762b", "sighting--c7e35a2a-d421-4f30-b181-303c82e18e74", "sighting--c93ab554-47d5-44e2-8e87-ea41247f7bee", "sighting--cf5f5e09-781b-4af9-9c7b-4eef24a40e28", "sighting--150cef3b-5fc3-4889-8015-a975a59739c6", "sighting--d0ac4502-1378-44dd-87f8-3f83fa625ce1", "sighting--478ac4be-bf5f-4907-9b7b-795bca1d457c", "sighting--955d52ef-7e30-461a-8bf1-412edf0883fb", "sighting--b1439c1f-c0c5-483b-a95a-ff5f5dba05a1", "sighting--15b2abb6-1605-42d7-a718-2ad3c738dc67", "sighting--450be583-5dbe-4399-916a-a8a23a6de811", "sighting--b17fc0f6-76c7-4789-a36f-cdbf247e7dd8", "sighting--30dd0ed8-ba39-45f6-ad77-1285c777a9a3", "sighting--b4b44dfe-cd7d-4c68-ad31-ae7b28f00bea", "sighting--d8637ddf-bd81-4443-a4c8-f1a518107556", "sighting--53daff90-2797-4b6a-92ad-b821c3ac5541", "sighting--220c5d90-7577-4d23-b11c-c0bd5054042c", "sighting--3f41558c-fe87-43e6-8141-bb6a31136af2", "sighting--904956a3-bf79-4782-8b8a-fb02b218eba1", "sighting--71fc21ec-31de-4e18-be56-15dc72d8ca0c", "sighting--8e1e0403-3b10-40c1-ac6f-a0feccbf7043", "sighting--8ac33e8e-e253-49d6-b2eb-15504fee7db8", "sighting--17a8bd88-836a-4bac-a358-468fa611a306", "sighting--2e93e66b-9c5c-4567-ad67-55e84c6d6b58", "sighting--013e5142-b80c-44fa-9ad6-d27c393c3f5a", "sighting--c973677c-16a1-4c56-af0f-ccda50446eac", "sighting--57a3bc47-d4da-4044-9519-696223f1d0b3", "sighting--c86e1d3b-2ca4-4983-9007-deba47f6ad63", "sighting--da6bf771-97db-4c76-982a-5ae767ebeae0", "sighting--d30959e4-a056-46a5-b470-a4132d2b6e0f", "sighting--99a015df-fd2b-42fa-b9f9-218c80bcd85f", "sighting--d9c8ac3f-4c6f-412f-9485-837fe90fdcee", "sighting--bfa9af5e-1e6f-4e62-92c5-acdf10a4e0fe", "sighting--7e32a607-9b06-4793-8358-e268d7f97e7a", "sighting--e63dae0b-7339-4089-89fd-4b0757a84d12", "sighting--84d3f347-ace4-4953-9175-e5fa67eaafb4", "sighting--3c954c2e-adb7-4964-953f-1a5ed6f07059", "sighting--c35cfe32-152f-4d0f-9e54-5486fbf55518", "sighting--cc8e1996-d70d-428a-b413-5e5d32066e80", "sighting--19fa1e12-e8d4-4d17-a4e4-549eeb6bd878", "sighting--aaa8e0a4-8e43-4ddb-90a1-65d54eac0388", "sighting--8a5ce133-e8ad-414b-b00b-fb4228e2df31", "sighting--a091ac00-de7a-4549-a6c5-cdc34fc6bcf2", "sighting--def1cc7f-76d7-4ba7-a4ba-600575c31e00", "sighting--cb3a111f-18d9-4ed8-b4e5-ddbc305f7659", "sighting--f0f9f4f9-f9c7-4bbe-963d-907d7f013b44", "sighting--c6b632c0-7aa9-4a3c-b64b-0df71756fae4", "sighting--9ac146d5-56e0-4914-ae1f-09844d450745", "sighting--f47db2e2-8d3a-4cc7-86a8-c00ca2abc722", "sighting--eb32d6fe-5145-4267-ac6d-66fddbd613c4", "sighting--0a451ff8-eef8-4b6e-bd90-c313d9bc4a08", "sighting--7e5255c6-9540-4fd2-b9f0-ea8cb5393aa7", "sighting--e5459b28-bfeb-4c40-a084-17fd276c121a", "sighting--360f391c-b080-411c-bf8a-3d9250b6f617", "sighting--809c4c22-3b85-4ffc-9bdc-a88c01f1d5ec", "sighting--0087489c-56fc-4361-a886-a0dc9e640103", "sighting--3c4ea366-1e99-46d4-b738-7a68e5e38759", "sighting--85c37953-55bd-47ec-a8d7-ab4532aa1ea8", "sighting--529be987-d829-467b-9d6b-f5135745898b", "sighting--51fdada0-a36e-4ca6-b0fa-ba95722810a0", "sighting--a347da4a-0e47-4462-afa1-d773a0ccce71", "sighting--14cbb9f1-d5ea-405b-94c6-ce90070308cc", "sighting--342080ed-5c02-4182-bc91-deb7a02cdab9", "sighting--e03a3afc-83f3-4ae9-8fad-be9a6e02eec1", "sighting--320b8bd9-cf1d-4045-9d4b-cd290549e2e1", "sighting--cb287e72-a6cc-420e-a68d-423a41666005", "sighting--4c9fd92c-d3e8-424b-8326-a098434b54d0", "sighting--07416c18-eb11-435f-8f7c-4f40a4c62fd0", "sighting--feb0fd5b-50e4-468b-8f02-cd888b592950", "sighting--d5e22dbd-0c1b-45a7-8d92-f6cc5ee865bc", "sighting--386607ae-6ecb-4a84-b68f-f433da59e6f2", "sighting--0fed8132-d9a8-4df1-a871-728754bafa73", "sighting--5eda3c4d-e39e-464d-8a5e-c1a3494d7d4e", "sighting--e00b91fb-e654-4da2-bb6c-0290e3c664ec", "sighting--1f860fdf-2e56-481f-989d-2094bd8d1b25", "sighting--a8e667e6-4196-4615-8b82-787ef362c2cf", "sighting--684a4d00-ad98-4da5-a768-ef37b02e55ab", "sighting--958feb93-a99e-4189-a0f6-bc0d2ff5c26c", "sighting--68642c4f-e773-449a-8082-82a88f465dc5", "sighting--63595b59-3faf-4106-b0c6-4b12df35ae0e", "sighting--eb871cd5-40e9-454f-b4f8-399ae2fbb934", "sighting--f66289c0-72bb-407a-9ce5-a28a3b2df05e", "sighting--88ba7867-553d-4e2a-97b7-6430f71ef6bc", "sighting--cea9c9b9-9303-4aef-a344-8621dce70c8d", "sighting--cc4c94fb-cee1-4911-b55f-ab442b9bf07b", "sighting--42f72262-b04a-4841-bcb3-0210c8c57985", "sighting--25950063-fafc-4575-ac16-d4a440eaf141", "sighting--f6be5c76-5a4f-4c98-98e3-5ec5f057246e", "sighting--3f66a236-bd1c-4327-95ac-a3571c1d2d59", "sighting--8ebc7efa-2350-46b0-9e36-7a6b78f16154", "sighting--bde8374b-a302-48e9-8f64-a7b758fcf9a5", "sighting--c58b096b-fa94-496e-a017-1e8fecdae652", "sighting--cd84b33f-e045-4c6e-ab66-f6f70e4dcec0", "sighting--58d80eaa-a717-40c9-9b84-62731cea8be7", "sighting--72ddc9ec-5fcc-41fc-918e-dadf64a387ba", "sighting--3adeb004-d60a-45d5-8689-6677344004af", "sighting--74bcd8b6-28ab-4194-b604-39b72d526ff2", "sighting--a24aad5d-681a-4717-b1d5-736b42ff1008", "sighting--152828e2-2274-4e74-977e-ac8d15879575", "sighting--d22224a2-7ed7-47a0-9c74-f4bab6db4d63", "sighting--8735f66e-d6cf-484c-9c93-f2c5e1b1641b", "sighting--dd2fc21c-c3eb-4cf3-9a79-146a7b3f2885", "sighting--1044bf55-93b2-444d-8c64-96959e3a155e", "sighting--8c024f0a-c41a-44fe-b1ce-974fb409277c", "sighting--88d268f0-4ad3-4e67-b5a1-cbfd234a13cb", "sighting--be71c51c-3f6c-4754-bb61-83c87e8ba22f", "sighting--9f523280-b99a-4117-9dad-8f1286662e9a", "sighting--7004403d-51cc-475a-a049-1efecf00a3d2", "sighting--ecf8740a-55ee-4079-871a-8837a08b2458", "sighting--c4d520ea-1b80-4f41-b663-e80696918554", "sighting--ac7a8be3-a70e-43eb-a5ee-403b661fb1e0", "sighting--ea8641c7-a76a-4876-b9d7-b9e020076b41", "sighting--cf8b95e6-1796-4070-a2cb-7a249bfb38a2", "sighting--78baa2e9-10f7-4707-bda1-b97accf77c64", "sighting--2daef9bf-ca53-4cdc-937d-ad223c5a2086", "sighting--2e2e072f-a92c-47ea-93f9-6e7e721898d9", "sighting--02f39fba-a3d1-41a7-b982-46beedf998af", "sighting--ada4849a-5d5f-4e8b-81a8-b7e0463c6bcb", "sighting--f2597879-9fa2-4792-ba57-9b5e801754aa", "sighting--1c78dda7-78e3-4c35-8064-deb4ce5632fe", "sighting--124e3d1f-db56-4bc0-8701-80d093c010f5", "sighting--43f759e7-f935-4383-bcf4-8701e8495090", "sighting--f3834dfb-3e73-452d-9d0e-c9c7df3057c5", "sighting--b7de6368-115a-4c32-af62-bf18c8880cf5", "sighting--d6b4c031-0e17-4201-8298-87509c46c1ea", "sighting--b5ffde62-5f57-4c97-ab54-30909a545d27", "sighting--2a38c615-3680-4a83-8fc0-7974f50c601c", "sighting--329b1307-fda6-4010-a8c2-76bbb59de438", "sighting--a788d78a-b5d6-421d-bb62-8dcb86f20eca", "sighting--8dd640c9-d4cb-4f23-bd88-46dd7f5dd40b", "sighting--5af45876-519d-4366-a378-62e77126bf33", "sighting--7d2c39ef-248c-408c-bab8-84a37c0e5c19", "sighting--caa6bae8-0983-4b3e-8753-e82f1eaa49f6", "sighting--a5783dbc-e2f4-42ea-bd6b-4906cef81c5b", "sighting--8a294fa3-2760-476f-8d92-b9ee52c79dc8", "sighting--411df3ea-5f43-42c6-95a7-87794b4c7537", "sighting--14dedbb1-90be-4e6e-9ed5-c722f9c088fd", "sighting--1c044414-41be-4415-b287-5e575d50e103", "sighting--039c3a33-4cd5-405f-8548-7a1819cbaa1f", "sighting--3c7f6bc3-8a0d-43e3-9add-5884d75fbe36", "sighting--4a4d8cc7-1aba-489e-9189-8742d1f154f9", "sighting--09aa3e99-098c-480a-8cc8-fc619294de8c", "sighting--239a0e79-e23a-484f-9482-b617235477a0", "sighting--95a09699-3411-4208-a6df-be6840574f05", "sighting--0496e85b-6c33-42f3-bc62-35673dbcd26b", "sighting--d59c42c8-7da7-4b4c-8958-10857882b4cf", "sighting--31483476-706c-4be1-affb-e04314f32691", "sighting--44a0a661-8669-4ae1-bc35-6589aae88959", "sighting--a0af359b-0ac3-41ac-a316-3b2473ef2187", "sighting--c54ca3c1-cc7b-48c4-9c24-a03554d82278", "sighting--8f1d8ba9-683f-46bc-891a-b58bbe59eb11", "sighting--c33f1963-0c13-4334-9c4c-b99587817b2f", "sighting--f8eba0a6-136c-4dc5-93cb-5d0569859c42", "sighting--5dce85a2-5b73-4486-9ce6-54c3b2f640c7", "sighting--21a5aa77-9348-42e5-a200-a109dcac235d", "sighting--c34b535d-051a-4032-af49-d38f77e5decf", "sighting--14e6593b-6aa3-4c64-9af7-bd865b9105b4", "sighting--a15701c9-984d-4d39-a4af-a90fb3707532", "sighting--4cd90684-25fc-49f6-9156-bdd03d3f0538", "sighting--adbd077a-8546-4b2d-8ed0-564f5ee0856c", "sighting--9e1806a7-cca2-4c9a-90d3-c3636704375c", "sighting--4f1c2d45-4f59-40ff-8b8e-9712b3b0d95d", "sighting--e709fd71-016a-4dce-985d-531ef7ecf510", "sighting--261180e7-a651-4773-8616-d00197e4ef69", "sighting--d344d140-c06f-4fbc-9e25-9bf3e6416147", "sighting--b06c7e5c-a23d-440a-8eaa-a2426032d2de", "sighting--995c90cf-939b-4ae9-92dd-52d75df03766", "sighting--66033d89-ac64-42a3-8c70-1963fb23f6f8", "sighting--9d896362-f87f-4787-b9c3-4d1ecf9ab9d8", "sighting--443ca32d-0dc8-4767-8c6b-d14c3d0f7d48", "sighting--5a2cb71e-bc01-4a73-969f-3b373dc8ba6f", "sighting--46b81632-ecc8-4e0b-87b2-9edda43c56b8", "sighting--9b559bde-ca8b-4f57-aab8-bce08c8b5dc8", "sighting--d805f814-d8e3-4f25-9a53-5107b89f3893", "sighting--745185dc-73fe-44a5-810d-a3ae165ec27f", "sighting--d7cbf244-f549-4aab-96d8-fac6f9a8f9f8", "sighting--aa35ff6d-f280-47fb-a623-7aa9401ed4f4", "sighting--da698cf4-e6c2-409e-a22a-c0bdf4b4f3e2", "sighting--3b9a1572-36ba-4e60-a87f-c2275133364c", "sighting--1ba30081-bd66-4b14-95f2-ec2d9e2791a8", "sighting--ca015ead-cb38-4b46-a5c2-c616be8c2e0e", "sighting--437a502c-6f4e-463e-ba99-d6720b4bf74c", "sighting--18d52e84-56a1-454c-9105-2cd494e0023f", "sighting--ba7c2fdc-56ce-411e-ad88-24e9ca840410", "sighting--6c409607-3f01-4820-9ceb-fcb748ef9a43", "sighting--604bff57-9e54-4229-aaad-21786b167da7", "sighting--a3201041-4a7f-47de-ab62-c1b5f50dd3d3", "sighting--b8b83985-2249-44f5-845d-ffdefba22921", "sighting--4079367d-f632-46dd-a404-8fefffd9026e", "sighting--f7525d19-7b05-4c6b-85b1-2c46850d74e9", "sighting--a46f3e0e-4d02-40be-b232-cdb2a4854321", "sighting--37d2a720-2ff2-468e-a414-ca22dc61a8df", "sighting--2a10bd20-2753-4fbc-8bd1-4bc1c06fdae6", "sighting--51249fa9-02fd-4d9b-9485-1ee90ab43e33", "sighting--dbf2c5af-f83e-4970-8f5b-8f69f4cbe498", "sighting--89ceff74-7b11-491c-a662-a128ac49ed2d", "sighting--3bd66ff1-46bf-4d9f-aea2-20ff55498fdd", "sighting--86fb9a57-2543-4c1d-b2d3-cd59caef6911", "sighting--58123d07-18c2-4e59-b85c-b88588b1c12c", "sighting--99d32fe3-abe8-4712-9116-dde1ad7f53f6", "sighting--8dd0b4dd-f19a-44e9-bf09-5931762bfa8b", "sighting--15e3323e-c8ae-4668-a0ef-55472b078f55", "sighting--64cc51a9-2a69-481b-b772-5b4324e03845", "sighting--8b4a2147-6eaa-41a7-bbd0-65ae65236564", "sighting--d44b0e11-4b8a-4ae1-baa9-5e9fdc22e7cd", "sighting--62a77e99-42f2-45c7-855c-fea3035ec1f5", "sighting--6f2dfb04-6d08-4eee-943f-ef24d034b319", "sighting--21485ed6-268e-4e43-9ef0-bbbaa0bbb2bb", "sighting--6c1de013-dd4a-4ecc-afae-15aed51dc5bb", "sighting--fb6961d6-0df1-44b6-8da7-871197fda6d7", "sighting--ad7ca968-8e9f-458c-82ba-056d85406b18", "sighting--051825aa-818b-4184-84af-826e4175134d", "sighting--99066cc7-532f-4d15-b973-3372f3bfe2f3", "sighting--bb237e64-6fa0-47fc-a7f1-d2d61ca5969c", "sighting--274684ca-5f35-449a-9320-181ba8cda48b", "sighting--5a1a0c5a-90b6-4b32-a97d-22164f9cb174", "sighting--8de85375-f404-48d7-85a9-f4613e43a33f", "sighting--1c6b77ae-cb26-4632-b407-316dbfd27af9", "sighting--1420f597-487a-4fb9-8dbe-06c2ef0ecfec", "sighting--3719d616-5dc2-4dfb-b863-e549e72c532a", "sighting--cb1380a1-6a40-4cd0-9371-da5a04e10d3e", "sighting--97ee0876-be31-4fdd-a267-05d1c82d43df", "sighting--37611837-7769-4067-a41a-c2332d368be8", "sighting--f0ae93a4-c628-4029-8543-8bc66991c59c", "sighting--c6f02ae7-7894-455a-8b99-9442c9dd9c44", "sighting--d37f9a1e-5f7b-4b00-9524-709d750ed83d", "sighting--da9ff87f-496f-4ce5-a1ed-b1b07a6b4358", "sighting--32484965-dc82-4ea5-a0d3-f91b6bef3b55", "sighting--385dcddb-f9f5-40b3-a64f-d2c3785492f6", "sighting--958df492-d0f7-4d02-a3d4-afcb6d026be5", "sighting--2d593517-c1a8-4c11-bf3c-cfde89aa1221", "sighting--897afc85-0257-48ad-8d48-534481f62525", "sighting--1523c73d-f2e4-41d3-ae0d-fc1048d6f15d", "sighting--8a7ac2b8-e14f-473b-aea5-1337774461a2", "sighting--e5032b96-7c6c-4c0a-b6c6-d29eba3b6e1b", "sighting--4b3058aa-6166-46d6-a785-2d779ee0d23c", "sighting--1906557d-9f5d-452a-9398-a68d0fb2dc3f", "sighting--c7ff4a57-4dd7-4632-b89d-e8c7fe4bd649", "sighting--eea08667-d14f-44c9-8861-0aca7177b3c1", "sighting--971516c5-5e8b-46f4-ae8f-db49517f250e", "sighting--9ad654aa-ba17-42cc-a72b-c4f13d3966c9", "sighting--80948311-cb66-42fb-b410-ed244af24f58", "sighting--ba87ed75-0884-46cf-a51e-4f738912f76c", "sighting--bb2c450e-070a-4c94-9d8b-0e3c2fda8c03", "sighting--e4adc3a3-f302-4a44-99f8-551103877e41", "sighting--d5c0465b-c48f-4165-976b-e5d0d34f3197", "sighting--f486ea82-c607-4ea3-b2e1-4d97fe5a56b2", "sighting--3d78ed24-abda-40ae-89f5-9d23eac573d5", "sighting--9deec4ce-7fce-4869-99e3-111c8a278bf9", "sighting--dc737bd2-4a11-445c-9448-2b361c11d496", "sighting--3ef9eda7-9e93-4b16-bd20-0054f664a2f3", "sighting--1e5870c3-7f2f-473b-8078-5bae8e8d2bbc", "sighting--783bb928-a3ab-469e-9cf8-f32e12da6fa4", "sighting--3fe34de6-ac4f-4b5c-b3a2-db2587332130", "sighting--5b4b156a-51ec-4999-b3b7-44a63f7a3fbf", "sighting--54c17869-622c-472f-8c4d-2aa5e6a2eb82", "sighting--62ebc82e-e9eb-4b29-b36b-ca482624ecf4", "sighting--f9010403-4e5b-400e-844b-4244c5b83ea2", "sighting--a7541e09-40b3-4e85-a1ad-203469b1bb88", "sighting--cab06754-398b-4130-b214-e99a9fa75fd7", "sighting--9c23ced9-52a1-456f-9a34-57bd183c23ab", "sighting--3abefaaf-130a-4e10-a049-20de8d32077e", "sighting--c19e55a5-d7ae-438f-b1a6-4c4c4ddad9ae", "sighting--50a4355d-5089-4429-9847-b4084c79e589", "sighting--8b46754a-cd6e-4654-880a-c980fcce1bb5", "sighting--e3067fe0-25f4-446c-a61d-4ab96f078e76", "sighting--f54960fa-9115-4151-b8b0-09c534624d0f", "sighting--f01ffda5-4e10-403f-82c6-9c2d942f0b31", "sighting--d1f7fe41-8244-43d0-9d61-7acaed6601b0", "sighting--59681fd4-b2e1-4da3-8b55-6c630b7a23aa", "sighting--900451ff-a290-41cb-8bfe-df31c389767f", "sighting--24accf53-60df-4cbb-aa54-58705f7fa8e8", "sighting--4462a27a-3d75-48a1-8e12-759face76dcf", "sighting--6739bb7f-582b-4868-8717-e4c67873ca63", "sighting--b40d7276-0297-4d80-b40a-69d7c3993fe2", "sighting--2dd3cfd0-ab5c-45b3-bd35-b7d6ac0668a4", "sighting--cddc0eb9-12f9-4823-afc4-070144c1f537", "sighting--c20f8a12-fe99-43e1-b3ca-397795aadd31", "sighting--a273b281-878a-4e87-ab56-17f1630e2016", "sighting--c08fea4a-7fe5-4d3b-8b29-9f26289f6d34", "sighting--48383b0a-c5d6-46b2-9d2b-c77420ff696f", "sighting--062f1dda-8b09-46ba-b4b9-ec3b6fccb03c", "sighting--40254e53-dde5-4c11-9c13-2ab59a32149e", "sighting--393215de-2ceb-4954-9bfe-de78052dd640", "sighting--cb0b155d-3854-4cf9-b922-27e04934d2ec", "sighting--02194079-0012-4d43-ab7e-e982e2b845a7", "sighting--b036a25a-35b6-4ac2-98ff-780cb8371d67", "sighting--66b6b596-499d-43a9-ac82-e156ef862eef", "sighting--2e4a99ee-8ba9-4349-b30d-975cc2928135", "sighting--62fe3ca0-ca3b-4711-a653-adfe94e06e3e", "sighting--70a8ed06-e363-425c-824e-a243fb9595f4", "sighting--c24ba981-3acc-4435-8217-a09316cfd7e8", "sighting--6e38eff3-d39d-424e-abe4-f07db9b1814d", "sighting--eab44f7d-64c1-44ac-8bf5-7ee1cfac8785", "sighting--899f8693-672e-4629-bb06-fde630af0dab", "sighting--ec9208fb-af9a-435e-a323-167300212634", "sighting--d86faa55-b3b6-43ae-acaa-b040cc5fa1ce", "sighting--fd128ca6-41b8-4873-a4d7-b28e68c991f9", "sighting--d3e78d52-791c-4314-8dab-c8c17c5ced87", "sighting--4784c97b-ffb8-4632-9cd7-13c673eb3c23", "sighting--d40d359b-8498-46c0-a624-996fa0e6e06d", "sighting--608fe260-52a9-4538-b8f9-482cf5efda17", "sighting--dd769511-c114-40fd-9742-4c219acfeb86", "sighting--465a564c-d05c-4cb0-b71b-fce2e0ab0eec", "sighting--010e74d8-8f8e-4435-ad96-badecd8a33f0", "sighting--48858a58-c601-4f54-8ee9-f4997a53453e", "sighting--a11e26a4-df0e-4fa2-ac5a-99235b26acc7", "sighting--5edb7132-2573-4bcb-92ae-f6eb2cff3411", "sighting--ee28bc7e-ee6a-41f1-9259-3094556a17b9", "sighting--e32c71d4-f2c6-4566-82fc-e80ffc276208", "sighting--29705be7-ca47-4eda-9406-30212b545052", "sighting--722ebe8b-7902-453c-a017-368ed3e47a53", "sighting--764ebffe-108e-48ec-8e4d-71bd915235b6", "sighting--ef1df3ab-0f72-46b0-acbc-675a00776d53", "sighting--8f1047f1-4e0d-4bb5-9961-b3f52963a40d", "sighting--584aa758-6b20-40d9-b989-e01f25d8c3b5", "sighting--40d79afc-1c72-42aa-95ea-6619e9c6f7d0", "sighting--75af6791-fbaa-4e2d-9543-0c5611c8ce59", "sighting--47f92404-fc6f-4528-9880-ab596ffc3aab", "sighting--4120d4be-a104-49e4-9b65-9d3228818aac", "sighting--98ae8840-abf6-4e6c-9020-0d759ef40104", "sighting--baff2939-f378-46cd-b4fb-812fd86d9c76", "sighting--96168631-ce9c-4c63-bc26-76246e564470", "sighting--ff9cd835-afce-4a85-9d2a-277d5f4be1f2", "sighting--d47c6e1b-fa32-4cd0-90d3-94d5c45b6cb3", "sighting--e23c6612-2ac9-495f-8ca3-9bf0605ff3b5", "sighting--b2981d8f-ad71-45dd-875f-fe84a56a373e", "sighting--4125961f-6317-4d28-ac8e-4342f7078fa2", "sighting--27242a89-5ede-41d1-aed2-d606382d26f4", "sighting--763cb2d7-4709-4db6-9176-88c58faef9ac", "sighting--d7e3a86f-310a-40fe-b51b-1012b5e6c875", "sighting--f3d62938-05d0-4192-a8ea-0da29abe64da", "sighting--37c85e2e-ee38-4025-bfb5-5d6a50f950ad", "sighting--acf529c0-03a5-4edd-a45a-9a6f05298ef3", "sighting--6b697b56-71de-4c10-9be8-f36dc80b5d3b", "sighting--84849e86-fd7b-49ce-ac47-f72156ab7157", "sighting--05c0a828-824b-4801-9b0e-8ba58d72517b", "sighting--28428afc-de09-43d0-bd46-e664c4a1fe47", "sighting--33f27b31-0637-4e67-9020-7b40cc540aab", "sighting--496c3d08-f555-48a9-b9af-31a4ac39d9d6", "sighting--1c497ba0-f2da-40d4-abab-e405ae0ec013", "sighting--3da9764c-8f72-4a8f-a600-9ad3237f1b02", "sighting--7e73059c-cbd6-403b-8d8c-5dfb51f300e1", "sighting--07611d58-f7b5-460f-bc3b-5927e7047cb4", "sighting--f091f384-de49-4ecf-961e-13cc43888a14", "sighting--93d7cc36-4d4f-4d94-972f-c6268cc648be", "sighting--628b741d-d1d7-48d5-8230-336e75c997b5", "sighting--60e64b9a-ca56-454a-8178-82ff4dcb1ce7", "sighting--d914f4ca-82a4-422f-819a-cf8dbba59940", "sighting--8820e6ab-03fc-40fe-aa90-7188752ba49f", "sighting--004a1a77-0ad8-4a01-845d-f89259bc1787", "sighting--f751cb08-7b3a-4f08-b0fd-70c41c2aa762", "sighting--8eb314c5-8cc7-41e5-ad5e-9b7ec5bfacdb", "sighting--d8d40bbc-1883-47b3-82b9-514d2d6c8b92", "sighting--7bcca316-ba2a-47e4-b96b-8bae28e2371d", "sighting--9f43105d-86dc-4d4f-ab97-0657ba50ca0a", "sighting--85e23c96-028d-4a76-97f0-34fd01ac5fed", "sighting--4d055e82-1ae2-462a-babd-327afa7a2d52", "sighting--314c78aa-3f0c-4862-82e5-dcedd97602fb", "sighting--ef905e1a-38b2-43ce-8bd6-e7e51759a3d6", "sighting--860d89a1-4352-41fd-8f68-e3c1ea0e1de7", "sighting--420d8304-ad63-4437-8ff2-8beae59fae41", "sighting--4023651b-090d-4ab5-9b77-f3bdc97a72af", "sighting--7810d7a5-9855-4e9e-8d32-4a5045f9d502", "sighting--3bd20238-13c1-4534-9985-c8f123079f70", "sighting--933ce2ac-b6e9-459d-8b7a-a244d6d7edc0", "sighting--2387f861-e807-48d6-8115-b8bee10aac7e", "sighting--1077a0dd-ea04-43e4-8241-7c3aa7a30944", "sighting--0c5a8264-065e-4f26-a201-01815c63cf59", "sighting--37f3bfc9-3346-4450-bc66-c1c4f8da6d20", "sighting--eba6193e-5e71-478c-8e0f-6a8ae048a881", "sighting--3fe402b1-42d0-44f3-a666-312fb7925a90", "sighting--5d4e62bd-1c81-4555-a520-fc8dc8d99f7e", "sighting--7b32cb12-5821-44d5-921c-a05f6f5e97f6", "sighting--c2b91405-99d9-4b85-8db1-bd7015bba190", "sighting--2d6527c0-9f51-40d7-ac0a-052b4bb9e5b4", "sighting--194a13b3-eda6-4018-aa8f-0fdb51db7671", "sighting--0707e219-663f-4d9b-8206-6dea642918e5", "sighting--e6a12090-e77e-4edc-8ec6-34f45e264cd5", "sighting--4bd1c61e-0b79-4f34-963e-93500d52e828", "sighting--ae5b43f4-4ac7-4848-a0f8-067141df1274", "sighting--1ff7936e-da03-406e-ba42-0417d73f2fbe", "sighting--21f07da8-c676-45d1-bc46-c27339c2ff38", "sighting--c0fe9060-c2e6-4141-9154-6c504b7b74fb", "sighting--e87b69a0-219f-47a0-a6d8-0170d50d1c31", "sighting--39744145-dcae-4c4e-b3cb-625e23e4f998", "sighting--276ee211-878a-4f4e-aa7a-0116231a2caf", "sighting--61bbc384-6a62-44c8-86b3-bb0e158f7da2", "sighting--9adee981-7540-4bf6-bd62-65d564ed7cfd", "sighting--94bcc304-8611-4cd3-955a-86e37425c3a0", "sighting--1f659a09-f3c9-4ba6-9953-28a4d10874d5", "sighting--46626f1f-012b-4fa2-9df7-dca8d7b23311", "sighting--83052bc6-6e4e-48c4-9e02-bcb3e68d4c30", "sighting--fedd729c-70a1-473a-80ef-b9ce32353668", "sighting--43d8d475-2b07-4b38-b610-49cda56c2bd5", "sighting--34879c23-ca55-49bf-a075-8729aac8f846", "sighting--7b048e78-1eb9-442b-9b08-7f593067a1f2", "sighting--367e953c-bf14-473f-8963-123fb3a2b4f3", "sighting--57b8c031-78ca-4b06-be64-b847b51b18c5", "sighting--1a8cbe90-9e3c-4b37-97c8-b8d5117c3cb6", "sighting--edf62bc0-c925-48ca-be34-7c5d34ec15a0", "sighting--4bf208a0-4d12-43ea-89c4-36d3f956c462", "sighting--d945234a-4a9d-45ce-9636-c497ff144caa", "sighting--d4b7aa4a-9ca3-480b-8532-7a2955d5ca5b", "sighting--41abc5f9-9a17-4e58-982c-15556f14cd30", "sighting--06182581-54a3-430d-9bf4-435b02a70885", "sighting--b5801c0f-5e43-4092-8d4f-697992236c2f", "sighting--c31e8c03-65ae-4e5d-8c19-7712f7859d3f", "sighting--19bb2644-0452-4a51-b4b4-555fa0e51a12", "sighting--b76965a8-7998-4f03-8a6e-244344841be3", "sighting--de57a82c-754f-4466-87bb-53ff82ee454d", "sighting--1c8c0b4a-64a2-4d83-b6be-94ec1fddd1fd", "sighting--083e5b27-8cd0-4b9a-ab69-f58301bf1f45", "sighting--65d8371c-5053-431a-9668-3cc87ec26157", "sighting--5c845c2c-51bc-4e44-9e15-2d52a139f87f", "sighting--6c0429ce-5869-4c7b-af60-dd6c6ef3d8b3", "sighting--c8493d3a-64fb-4b92-ba1b-e232e717a1cd", "sighting--ee95ed7b-785d-44c2-91df-304bc0e62989", "sighting--036ca29d-43e5-4647-8bbb-9008bebdfce1", "sighting--9c44f5d4-fa88-444c-bec9-76e8058b11c1", "sighting--1eee3cb9-e9b9-445f-9166-83507cf1d089", "sighting--4d555168-880f-4e65-953c-d6538944ba1a", "sighting--12e1b7bd-c909-4206-9dd2-b3ea814c8c72", "sighting--085fd109-10e1-402d-9924-55a04a352cad", "sighting--fc1d23c9-58df-467c-b277-5a481a3ee1e7", "sighting--eaa2ad9b-1624-4c56-9099-40e71f0ed8ce", "sighting--b86b241e-634f-4d9e-bb03-ba451ed2b007", "sighting--544929fa-badb-4106-8455-5f9134d584d8", "sighting--ac0c62e8-40db-4487-8b22-a0c62757d939", "sighting--27d1b4a3-a2cd-4bac-8ab3-9d0ec8386698", "sighting--c88f8a9a-a60e-4bf7-82d2-05dee4a8f08c", "sighting--f6df87d8-c62c-4c3f-aa26-84db54ac08ba", "sighting--f574d42a-ba74-4e10-84ff-bc6f26caf37e", "sighting--cf17477f-ad6b-46d9-9f52-a7d717cbdb1a", "sighting--d81b44c4-065e-4b7c-af82-96e927e3a814", "sighting--4f9ae959-52fb-4d5c-9b12-afb6a60b9846", "sighting--515742b4-700a-4498-adab-ae614e966e07", "sighting--98082fbc-508e-41b6-b180-959a8082749f", "sighting--67615165-062d-4853-b494-7d051ed8ff82", "sighting--a455394f-49cb-4d56-99c8-ec5f7d7a853c", "sighting--e2ff3ebd-9c40-41d6-b8c6-d19d519cfc54", "sighting--4a45365c-9560-422b-837e-b253f199f67d", "sighting--78408cda-c3b1-4de7-a370-7a542eeac567", "sighting--051fbf97-1054-46de-8255-5b9acaad0ab5", "sighting--1393e8f4-2cf8-4fc0-b030-085a58955a30", "sighting--1cf89382-e8e1-4be4-9bb3-785e9d517804", "sighting--0633aca0-b042-41d7-84cc-839dbb27630b", "sighting--03e64076-7da4-44bd-b466-468aea448814", "sighting--0ba515ed-d515-4cce-a6f1-f2e5657be722", "sighting--77252bd3-4a62-46df-aff2-62c4d834fe0c", "sighting--5f9099f2-2ab6-4619-aa51-48290d9d6524", "sighting--91516bfc-04cb-42c5-902e-b7cdf91cf923", "sighting--f1139e9b-7f2b-42bd-b369-8d6cb0eeef4d", "sighting--91c9616c-020d-4592-951c-7956750b78d1", "sighting--6e266ee3-0a34-42a6-9873-c019df0a34bc", "sighting--83c65b32-d4cd-409c-8148-9bde639a04ee", "sighting--b9d47ae6-aa0d-419d-a7b2-38fa9a2d722d", "sighting--5b1fd2cd-bd9f-4bf4-a603-724509fa60d8", "sighting--362f9deb-ffe7-4610-b05a-109fb173411a", "sighting--65031018-e248-4c8f-b18e-31757ead709c", "sighting--7e5e3306-03d7-4003-81ae-e0753638fbf3", "sighting--bbdbdf43-a0a6-48f5-a717-e6c1fbad69ed", "sighting--f3366afa-c2a8-4c2e-a1fa-1e43a79bf6f2", "sighting--72533c08-e7f2-435d-a87f-661cc42aeefa", "sighting--ea6ba8af-23d8-4638-bc5d-bb29cece19f9", "sighting--3c81f819-8c73-4557-88f1-198546d2f968", "sighting--bfe8b571-b7fd-460b-8418-c85a7e807f87", "sighting--81024c7c-91dd-472b-b73b-9152308f33f0", "sighting--d6a49a5a-81c4-4bdb-a454-7f6881fac94a", "sighting--eb5c7560-5abd-4378-8749-6306a7d05cb0", "sighting--00e84874-5010-4388-ac62-8184c4005fb4", "sighting--6998f86f-7a85-4c33-b9ff-c1c89608462a", "sighting--7f912494-2883-4ce8-a44c-290495fb5f51", "sighting--795e58be-60de-4f38-9c58-c400954912a2", "sighting--34d94050-3c57-4fcb-a05a-2ec2546d7df7", "sighting--ee36773b-5974-45b2-b368-07d9db2d3ab5", "sighting--c3c6b018-c433-4b88-87da-3157ba5cf01d", "sighting--1275a115-7261-4b6f-8b34-25cc9f4fbcd4", "sighting--6e2e256e-1500-4786-9cea-33dba731cc00", "sighting--e1e73b9f-b1d4-4eb3-94be-d5a0952f30aa", "sighting--66de8804-33f7-43f9-9a10-d44fed049cbf", "sighting--106bfd09-1b28-44a3-b767-59b16b8a00a3", "sighting--6a0e94a2-e987-4de1-86c7-55132b43670e", "sighting--64141f16-01c9-4317-b3d9-e52e5b1d0bf9", "sighting--cf3eca43-666e-443a-a63d-de836cc168fe", "sighting--f59a79b5-1677-4421-8027-bccb96f8b8d9", "sighting--5d961e85-4a6b-4bdf-b9e5-b5b548d02510", "sighting--abd037ec-fbb9-4391-85e7-65ac4d13d083", "sighting--c2ec16b1-dc30-49d0-a3e5-f1dfb1c4ba57", "sighting--ce985d8b-95f5-47c1-8c43-c997718f5328", "sighting--c110c41c-db1c-401d-99e8-888af7617c90", "sighting--8db896c8-9146-47be-b606-ecab0e12911a", "sighting--a87337fb-0942-4290-b89f-dae18ecc135f", "sighting--f51e3d5d-d8cf-4129-9a97-8bd0ae8e4fbf", "sighting--770ea2fb-a914-4f90-bf70-2bcdfda8ac03", "sighting--2371fcb2-ad5a-4946-9fc4-48126b1cc4d0", "sighting--2051261c-a3d1-4b90-8da1-5683d852c098", "sighting--9a17f569-a7f1-43f8-9fd3-9a4ce9af6f09", "sighting--16a135bb-1221-416b-97ec-a3f0d5cc9ff2", "sighting--3bad3ca0-b544-444c-a822-1133937cf73b", "sighting--4c195b90-a31a-4d6b-a610-77ae99088d8c", "sighting--a07225da-fe5c-4d36-99ed-3d0e6491dd3b", "sighting--39fa4eb1-be6a-429a-84cf-42ed0312ea4b", "sighting--bc3de6b6-d8a5-4888-b9bd-f9f4d7ac894c", "sighting--7eb00743-70eb-4f19-b580-d0e89e3e0f11", "sighting--b00572ba-2354-4843-bc03-6f6aa948d9d6", "sighting--0005778b-4da5-4465-8134-54e68160bad6", "sighting--b188d180-0da3-46ba-bb4e-6ca94d58ecd0", "sighting--0d8bcc76-6bc7-4a26-90a4-7fdfe26e5282", "sighting--85910c4e-3c26-4da2-8a31-a5697dc609e0", "sighting--e310a8cf-c239-4fd2-b43d-646ce54d971c", "sighting--171352e4-89b5-497b-a790-45e2da500463", "sighting--9bbeda2a-d635-41aa-a645-c1299b9c582b", "sighting--9ab18c9d-e68c-41d4-bb87-82a6a91812cf", "sighting--746e3fb1-49f5-4eff-bc15-68c367e008d4", "sighting--d7a3b947-4155-42a9-8b04-ce90807d34aa", "sighting--f5fc6ceb-4153-4d1c-8120-0d13147fce2f", "sighting--7fa8ad30-c090-4269-83a2-98eb98364050", "sighting--ef2621ec-370b-4f41-a882-a491554d39a0", "sighting--1151555f-b9c7-4f5d-b10f-d998f78cf5ba", "sighting--b759c15d-99b7-49c1-aa7d-1f3038dc39ba", "sighting--805d1872-e821-40bd-b20d-4f59747ce4f5", "sighting--81698c85-21a7-43fb-a5d1-fce3a712ebe2", "sighting--1595d729-b4b1-4ea8-8cec-2944d96c0c9b", "sighting--7ea269fd-7b36-46e0-9952-cd4e41f25cac", "sighting--e2d37faa-b800-4ecf-8142-2967b6f25a2a", "sighting--e1d64399-3b09-4ee9-8e79-a521acdb0ada", "sighting--06d0edf2-3ba7-467d-a54e-43e83e22e8d8", "sighting--4a9618f9-82f7-472f-906b-8bb7224b7fd2", "sighting--1cb172ee-d5be-4672-84aa-d1d3bc833daa", "sighting--000fbdb2-543a-40fb-a16e-a7bf5d30600b", "sighting--eb22505f-91ad-45c8-8eb3-0163cd613270", "sighting--710003a8-b740-4198-831c-4b3770845d2f", "sighting--0b93f296-2a64-4f07-b995-a7610bd7fc2b", "sighting--980dc8e6-651a-40e8-97ff-6562c2d4ea4b", "sighting--e8b8cd49-6886-4ff0-8730-3b411b47bb8c", "sighting--9ddd9505-054f-4b22-9d20-2068cd8c0e4a", "sighting--d358bc80-e65f-4048-b6f7-af4643ea3f19", "sighting--86567bfd-b7e3-4421-97ac-78d105721a16", "sighting--d29655b8-3443-4c5e-851e-ccbde7ce404b", "sighting--bea41107-63ae-4574-a8c2-9392a61395bf", "sighting--2160b20b-bcff-40a3-b9f2-4f4c41b0c6a3", "sighting--f5487446-8f55-45f5-b25e-3ea948eccf05", "sighting--1cc8c51a-299c-4dd4-bf76-f9880d7eaa79", "sighting--a1c9b55e-38b1-4c10-8a38-781de262e153", "sighting--b5261297-ccfe-4441-b92e-d889a824e1a1", "sighting--d7657717-8731-47c8-b09d-441f1ecda75c", "sighting--a4f644c7-bfd8-4ca6-abde-ecdb78f460dd", "sighting--e7895489-bf95-41fb-ab31-6039cfaa786f", "sighting--b6ac950a-1984-4b50-ae4e-400eddcb03cc", "sighting--2b53b82b-ce00-486e-9327-b01365973e45", "sighting--69a0da59-2dd3-4509-9962-ed1554f61743", "sighting--cb990995-0324-430d-97ec-8aa2f80c44c3", "sighting--c14d008a-82db-476c-8b4a-85de30f4b0d1", "sighting--a0b7ddad-19c7-4487-acc1-4838d0795699", "sighting--638304d6-0e87-4809-807b-ded6321c5cec", "sighting--7da9b085-93a6-47bb-b314-37586067b44c", "sighting--98056663-5733-4701-8eed-1d43613ab871", "sighting--80a90f49-2d41-4201-8e12-dc4b34f5569b", "sighting--cec5c61d-9074-473e-a779-8cfc603bb7c4", "sighting--563a8aaa-17dc-44b9-8dd3-022e04f715cc", "sighting--247f0c8e-de94-427e-8a60-2172d99a32b1", "sighting--594439f9-1791-45d9-af2a-bb0f5662de5b", "sighting--1e2f5103-c17c-4a1a-9303-1bb00104d285", "sighting--1edb648e-165d-4d3a-a666-cbdef50ae464", "sighting--5e221857-48ce-4a79-904d-b219d74be4cc", "sighting--c0088063-12cf-4fba-b31f-93ed3370eccf", "sighting--1c384af4-1c75-4bd3-9159-ad13d234ed3a", "sighting--1f1d25b1-b73c-4d0e-88d7-f5e765409de8", "sighting--67b26450-cd1b-40a9-811d-c500844b5fb4", "sighting--61166cd6-5fac-4ac2-affc-b7438e583314", "sighting--afd5f99f-9242-42d2-9112-b33124379544", "sighting--75ce5f8e-bd80-42fa-9f18-b5037efcd182", "sighting--f41fd9b3-a4de-4fbe-b717-1933fe099a50", "sighting--d4ca89b7-3577-4aa2-be4f-2959c7f4bed3", "sighting--58f61d77-2b3f-43d6-9f30-c1bf0aa12691", "sighting--e6ac68ce-67d8-42cf-98a9-f87a388adbf3", "sighting--c2fd7fe9-cac1-4c65-8c3b-b6cf54b96a31", "sighting--06db198f-0731-4585-a762-4e79db6285c7", "sighting--d4c33c36-ffeb-4ec8-87be-b34062030aab", "sighting--b782d173-fb64-477f-8bec-42ef8fea4868", "sighting--4e94d6b1-1af3-4d18-a9f2-3a63f2dde3ba", "sighting--515ceb18-7eeb-4600-bcf8-74cd0fb9d7fa", "sighting--62fe4673-39c8-4c16-87bc-c71d8c9239e5", "sighting--71e60c6b-ce60-4c2d-a482-d63baaac19f0", "sighting--a88b54c2-edbb-4362-9522-03c13c9de417", "sighting--c7ae6a04-3621-4426-af24-90a6e3464d13", "sighting--52318e60-bb90-471a-9fac-b33b026070c1", "sighting--caf75687-c171-4e95-abab-468c5c4a9f23", "sighting--2703a611-46af-4c9f-89c9-e43399b470ff", "sighting--d0b090ef-7a4a-4e55-8220-7e905a6139cf", "sighting--754c5eee-4543-4b22-bb32-30189f8bd4e0", "sighting--a1c338e5-e827-449a-abfa-78d9f409885d", "sighting--7e2b56b4-80dd-4c16-8dbc-d8da6731d850", "sighting--13bcc009-f3c4-4ab9-9260-909a60cca222", "sighting--81b8d972-745e-4ea9-bb82-4ecf9a3d0247", "sighting--0d8eaf34-057f-47a4-b1f2-a5d2c2135ef7", "sighting--2d452589-c4be-4e80-9360-61381da5f778", "sighting--b367d8e8-5c69-4e8a-ac71-32291e02db57", "sighting--d06eacd8-2fa6-430f-a8ab-c0f5d5098ec7", "sighting--aa2c7a0c-13c1-4f84-8de1-85f65009ba61", "sighting--f0ea51d4-a91c-47d6-beb4-ca2314017b1b", "sighting--39dc5eed-bc58-4f50-9ee8-d43a35d7dada", "sighting--0d920bea-04a5-4074-ac44-29093d065909", "sighting--73c0d9b9-9c09-4163-8502-9af56a060232", "sighting--0e9f2f1d-aee1-408e-bd16-6a8cc76b764c", "sighting--e648f989-6a21-4fbd-835a-a21165b9f3d9", "sighting--1f0dd5fc-f118-42c1-aa2d-b67ab7843403", "sighting--15893ba0-9aba-47ac-b18c-f2b022ef2a46", "sighting--78dc326e-7ff0-4017-a803-9e6705e73905", "sighting--d51ffedc-33f1-49f1-81e7-81056b040f63", "sighting--3e0fd80d-3f05-4f72-aad7-ee538f8a5fe4", "sighting--2cd702b0-26e9-47f6-9055-e37e8d455d50", "sighting--8a49ce55-07ca-4ae9-9cc4-dc5638f4437f", "sighting--028c6c98-04e0-4fd1-95e0-74bc01ac0107", "sighting--7d46e2a7-92e7-46b9-ae39-4dd257d296fc", "sighting--2d9cfbbf-75f3-439f-b142-10a183fc2d52", "sighting--70c9718f-3451-4317-9de7-fc7d1a7af64f", "sighting--2e879568-780b-422b-b566-f872602c2054", "sighting--1b182b13-340e-46e1-8465-c60112dcb1a4", "sighting--3e3b1639-d7c1-4342-9e8a-cb597f49bc7e", "sighting--34a11352-790e-4674-b94b-1646f2be1941", "sighting--edd1acff-73cb-4168-9c39-05c4218106aa", "sighting--1d43a8ff-e2ce-4f12-ac08-590c912414ad", "sighting--3a84e3d5-c0ca-4555-83d3-ff39a9c1c35b", "sighting--d6e9040a-fca3-4cbd-bab0-8e948ffaca25", "sighting--e04abddd-25cc-4560-990b-5b11a7a287cb", "sighting--90d74a89-caa9-43b1-adc5-3087c759edc1", "sighting--b439e5b8-efc6-4051-bc30-7a4608681874", "sighting--7819dcc6-b972-4dc3-8845-b3fb28a07b30", "sighting--11fae828-152c-41da-874a-af669d206624", "sighting--2b4a36b3-f5bf-4892-b447-382f1a89bba7", "sighting--758d5a1a-4a34-47f9-926a-2be6a8ee75e8", "sighting--ff316f14-e7a3-4eb9-a86c-68ec1128290a", "sighting--74447162-ed44-4585-8511-7929ceb82590", "sighting--ca8baa39-9b99-44a7-8b44-927284988cd7", "sighting--8b5a836b-7f90-4e27-a170-0beb27a1442c", "sighting--b9eb7435-55d4-45c0-9b07-fcb72fbf51fd", "sighting--610574cf-874d-4c64-b5cd-447d10e363ca", "sighting--d0da5af3-4ae4-4bac-89db-1a90e6014c1b", "sighting--adcde9f9-a836-4b01-ae5b-64aeddf49d01", "sighting--431e23f8-ac15-4aca-bb29-3252cbf4d398", "sighting--25e448df-7f66-453c-b14e-429ad427dfd6", "sighting--29f52000-2098-4299-b444-f74923568ac7", "sighting--e4b80ced-0de3-4060-bcb6-c0ec9f8cad65", "sighting--4529de8e-da3e-4592-9ee3-d6d008abf020", "sighting--3a1840b9-4d5e-4bd9-b26f-920709ce4101", "sighting--a14a3c20-a78a-4de1-9a8e-f4859132ee78", "sighting--8c4e450b-b1b9-44f2-86f1-7a5b2e0bce36", "sighting--4f469726-e32d-4cff-b749-fe5dfb22707e", "sighting--a351ae57-337a-4151-88bc-a00319e7fa38", "sighting--33e83419-d0ca-478c-a763-2b57647cb328", "sighting--1ea7b6af-84b2-417c-83c0-9032678217e0", "sighting--0a7ff6a6-1102-4ac0-8bf5-e5c1e765e01c", "sighting--c745c5b8-6aa0-44f9-984a-fab23c771344", "sighting--2504430d-0b69-47fd-af78-ae651558e456", "sighting--f837b315-9827-41cd-b98e-863c8de80d3a", "sighting--2fbabcab-a3f0-47da-a464-9d95c440c39b", "sighting--7ef3899e-2558-4988-af23-5f5358bdc1df", "sighting--bcc772dc-1600-45db-a223-1dd943a12d5e", "sighting--0814ca0e-fc28-4ddc-afde-3e84964b2a41", "sighting--781ee4e1-1b23-4826-9171-c2bac0d89321", "sighting--6d401111-4edc-4bdd-86ff-806196ba6174", "sighting--df4a71ae-de04-4109-a5eb-7605be5efb61", "sighting--2a3a9f1f-0dbb-4d83-aa7a-dfd9211b99d9", "sighting--b3cd368f-816a-4f7a-aee0-e8035c37bf89", "sighting--d749fb95-df68-4ce9-8ef5-923a3c75c90f", "sighting--e3589020-dde6-43c1-8257-cf1cb35e1b81", "sighting--1ec4657c-c840-4453-842e-724a733053e9", "sighting--9bc8f5a6-e27b-4968-86a8-9b1918d7c64f", "sighting--c95a5d0e-adf2-466b-a37a-a1cd38034d6a", "sighting--27613ee3-84c2-4986-aed6-8e7a59255112", "sighting--51114010-ec6b-48c3-9069-7186cb73b191", "sighting--1941a2db-13d9-4d2a-8f77-6f6e0bc1cdd0", "sighting--579ba716-bd33-4330-9305-74bf1963811d", "sighting--222e461b-2a96-4e43-9dd2-9767ff3c2222", "sighting--89686892-9aac-4dd9-ac30-afd2772aca94", "sighting--24e48174-81b0-4c74-89b4-a7cf44494c9c", "sighting--7ac6f08a-3f6e-4a03-adea-0b66e39dc379", "sighting--4943492f-dd9b-47c0-be2e-53a9c0d9517f", "sighting--11a0b68e-9c95-4082-bf16-198f6123c7b1", "sighting--c4b93b32-bed4-4da2-957f-bee33a811ef4", "sighting--ba53fdba-9a89-4758-876b-214cdde405d3", "sighting--e1472876-6ebc-4925-adab-70e6857390e9", "sighting--b64b44ca-3838-4af2-8c0a-c0b96094c0f5", "sighting--4c73ad88-d22b-4fea-bfc5-cc4fa7e578b3", "sighting--35ec308d-8d85-4d5d-ad4d-a86f8828e4b3", "sighting--d0c683cf-26a5-4265-92ce-3c86778085d7", "sighting--0b3f951d-3909-48f7-aa11-fe7eebcaf6e3", "sighting--12439d66-6ea0-4b27-9890-ed630fcdf0c3", "sighting--77803fde-1c53-4fc3-bacc-3767abd5cd56", "sighting--8a1ac0fd-ec0e-49c7-ace8-ac1834b30e2c", "sighting--1a1ce0ec-5fe8-43af-8a46-eaf0fb53c588", "sighting--60572b83-ca7b-4927-baae-5e35f4adc49f", "sighting--fe821771-b57e-44f3-b877-6985d4f21313", "sighting--09010f4f-05c6-406e-9408-0b5f98a3956a", "sighting--b3016262-a09b-462e-9ca2-299d6db1b83f", "sighting--ee230790-3296-4681-8326-c77744295341", "sighting--685eae5b-bd46-4b62-9d2c-d6b39fb06f21", "sighting--e5026db1-cc8a-4c53-9025-2e18ad122b24", "sighting--3b012bee-97ff-4842-a4a9-a7c9bc30caeb", "sighting--886369af-da76-4397-a257-e2172e65c266", "sighting--9c233d54-30e6-444e-b687-295bb864c520", "sighting--723264b4-9275-47fa-9b8c-c7c415603104", "sighting--2065ad24-ed72-4496-a65a-d5ffe6880779", "sighting--9d86d011-96ed-40bb-82fc-1a8b60ce142e", "sighting--b6678f58-a380-4a18-878c-409c558a355e", "sighting--69f5d809-0bcd-4854-8968-189d27cc86e7", "sighting--d7e21ba5-7e26-4156-980e-8acee1cdb142", "sighting--66c8b4d5-4995-4e96-84c7-89515bf8b1cf", "sighting--1e4796f0-7c90-4481-9062-83b5d5478cc9", "sighting--35ee064e-7fe8-4a16-9475-e06c74d67f1a", "sighting--98b96f6b-e03e-45a9-b75b-07049966bd48", "sighting--d3d44b2b-8195-4cbb-84f8-5394ae292990", "sighting--e5db72da-5ee0-48b6-af72-60c14c913a53", "sighting--0f696a9c-252b-42de-8d35-080ad4ad466e", "sighting--5881083f-d85a-425c-bbd0-6db3890b5781", "sighting--dfde5a82-2d39-4d73-9157-d0b426533f65", "sighting--3b1f6117-0de5-4d9f-8771-84082eb4d685", "sighting--f57a792b-e2e6-4a20-931e-49ab5a2b73cc", "sighting--4dd1692c-4128-4f7f-ac2a-33443743356b", "sighting--70672de3-4421-4736-8e5b-a25d5edf58b0", "sighting--2b2efcf1-9501-4c76-82a7-f9148d5b8942", "sighting--26aa9d54-32f6-44c7-85bf-8d00d6ea487b", "sighting--8e962ae9-6582-40c0-a9df-228cc4fdaf4e", "sighting--9187aab6-20f4-4134-9a5f-7fabde7efd95", "sighting--33984f31-f11b-4706-9c97-b12c84a2d113", "sighting--94682bb8-4878-488c-af3b-887177a296f8", "sighting--b5725460-cd16-4da2-a5bf-74f9076df71f", "sighting--a851d836-c6fe-4d4f-80ca-479fc96c482e", "sighting--c8891b8f-24df-4aa7-b62d-b63e5c0899c6", "sighting--ad465840-2dbb-4b4d-a05d-31d17b0a2a3b", "sighting--b2a24395-0eb8-4f88-b233-b586439d559e", "sighting--e62fe351-bc3c-4656-b364-6016b6e73be1", "sighting--e5c226d9-c15d-4c42-9c71-e4649b04f6ee", "sighting--f7e8cbac-66fa-4697-9b26-370989ccfc6a", "sighting--c8a821f7-e1cf-4757-93ba-f7490c52b17e", "sighting--2ad0b24e-0cdb-4c5e-a73a-ca5b47d18827", "sighting--776f26a3-3e92-4ea2-9433-7054a25d3f87", "sighting--d5f4ec47-d8c0-4ca4-91a4-e7a1e02e35ce", "sighting--d06bbcfa-ef13-4ccf-9511-0e3dd747bd2e", "sighting--29b70fa4-ea11-4cc8-b6db-424775958de6", "sighting--ae4d78fe-99ef-43a1-85e0-a5d119b0af05", "sighting--72396334-d369-4cc9-992b-c7e685a175fa", "sighting--c89fa528-0fe9-4a61-a6ab-317424f687a6", "sighting--f3d325ce-e51d-48c6-a4f2-21fb637b68c3", "sighting--f647ec8e-433b-4f86-b5b1-aba75da022e3", "sighting--2f7dd686-98cf-4b6f-83a2-61be0b6757c1", "sighting--2accb5de-fc27-45de-a742-b2fa94a8de8c", "sighting--941c101f-6a2f-4a1c-808f-99c8905e3a39", "sighting--efad894c-41dc-4a10-921e-6d1808a68188", "sighting--4f951c89-9e07-4a7c-b7da-75234cc3e829", "sighting--fe52caad-07c7-4d6d-a05a-50a96873cb60", "sighting--e0b47a15-7d6a-42aa-bc22-eeee78d2905d", "sighting--3a789ab6-22d3-40ac-9d49-42a69397f3f5", "sighting--bb625f90-c4cb-4d4c-b19c-3a8fd3d64a54", "sighting--f6936f84-a79d-42e3-8637-5f071084c565", "sighting--650e0d21-4e7b-4170-b01a-7fa86d10c7f3", "sighting--aae9dd74-d728-4c2e-a65e-000a0d760fec", "sighting--27c8b698-d779-4df0-bf6d-4e5ba13d3e7c", "sighting--b6b06745-4334-4153-80ad-ca69587b6993", "sighting--5e997618-78d3-4587-b090-9ce58efc593f", "sighting--24d4e126-46a1-4bf3-ac90-6b9a1a11e4a1", "sighting--5e19f6a5-8117-49e4-a3dd-da73c50bd4ab", "sighting--22e6b529-d0a0-4609-87d1-f394bba95eb8", "sighting--b3f09888-8212-49ab-a024-ec6ab5a1d5f6", "sighting--4e2d40b0-09fd-4159-be36-bacb30e61e83", "sighting--732b1b73-f0f7-4eb9-bea4-28bbc9c8724b", "sighting--337ecbf5-fb7a-4fd4-901b-525b9b9ae98c", "sighting--f23390ea-6307-4359-b025-234e7d2ff5b0", "sighting--a6846124-704a-428e-be85-49f05af9ca4c", "sighting--2cef66af-e6b8-4a5f-bf21-a382e9443447", "sighting--45ac7e0f-8fe9-46d0-9f0f-7e67c312a4e3", "sighting--3b21cf6e-2a6f-42d3-98d0-f0e60a03d5d7", "sighting--f5a7647f-403c-42f9-9bdf-3f6aaf760240", "sighting--9e7c6a7b-fd89-47e6-ad79-4fbcb3beaac7", "sighting--1aa21dec-754c-4be0-a9fa-87994481fdee", "sighting--363389f5-7d96-4d17-875c-a36bf12dd50f", "sighting--5cbc94bc-433f-4211-aabb-f6f43357d881", "sighting--78c4976a-ff01-46fe-8457-3c4887d449df", "sighting--dbc63755-e040-4824-ad64-e5603ee24c14", "sighting--0d890bc1-8c54-45cb-bf2e-4d82768f0748", "sighting--6502ff80-aea8-4741-8d52-017c65dbe1ca", "sighting--4dd55dd7-c1d0-4e30-a9e3-eaec50081ab9", "sighting--0fd6757e-eab1-4cdf-939b-4b2c4ebcbda8", "sighting--1d7ccaf0-6143-40fd-955e-853a24cafcef", "sighting--4b8a325a-764b-406e-b976-aba8bc024eef", "sighting--b37dac69-f15d-44f7-b38b-e81dcc7aab9c", "sighting--c22344b6-51cf-44a1-9f74-66874813b437", "sighting--529147f8-ea05-48a2-95de-baabfbcc7778", "sighting--aba442b8-8614-43f3-869f-1a8bb94a7bca", "sighting--2a347165-f0d6-4bc7-9a91-ce4f59c08fa8", "sighting--d5b17443-3669-425d-8c9c-585de49468ec", "sighting--5ec2c5ab-de1e-4fbc-8207-fcee9ceb6344", "sighting--fbcbb97e-f092-4802-a7f1-04601e4e9ba6", "sighting--9bb65356-d32a-48b3-bef2-9ab92b42a547", "sighting--86a4af57-1369-4203-b789-3f07161d4d97", "sighting--c10c52bc-fdd8-486f-8d6b-93e1fb633a0b", "sighting--6ef16aaf-9e75-48c4-84af-782922ecf238", "sighting--bc93f566-873e-465d-8eb1-5f68c51f9b7b", "sighting--624e9427-15f1-47ac-b072-548310dc3b73", "sighting--7e3cec13-7566-45c9-b890-80f7eec483a2", "sighting--79a50904-919b-43fa-92c6-ef0560fec090", "sighting--7b5d4196-e876-43fa-830a-cb00ffa11795", "sighting--08418d1c-7bca-4255-8e09-4dfd70ecb0b1", "sighting--36b9c8b9-ec82-4fee-9d76-10d6f2143251", "sighting--bf2196e1-85c2-44e4-a344-00694d5824fa", "sighting--e6a7a57d-3be2-4da0-b5ff-9baff7eb5354", "sighting--75dc7628-0763-4f24-84c7-04f15b9d9ff2", "sighting--346376f6-c0e5-40c3-acf6-a6385f8b7017", "sighting--fab3bed1-31b2-4893-b9b9-61c13597dd13", "sighting--56a9ae25-1ad8-4a3c-a6ca-3c637ddfa93e", "sighting--4175ebef-255f-4c04-b31d-05fa3a0cc547", "sighting--e03542e0-3522-413a-bd5d-6600b62b5f37", "sighting--9d8fce81-5761-4c7e-8e55-7374fe6cfd33", "sighting--7a86ec19-2305-412d-8c0e-b350bbbc4946", "sighting--f3517f5a-cde3-441a-96cc-68bfd8bc3e41", "sighting--ca0316eb-8e75-4579-b14f-81ff0e19f8cd", "sighting--da604760-b66f-4e21-8595-ed9fd6fda915", "sighting--d7160cd4-1810-46f1-887b-4e787c0bbe90", "sighting--0a8cb06d-afb7-481b-9de8-02353ad83ad9", "sighting--de197854-aab3-485a-b2b6-5fb5737d3bd5", "sighting--60c07937-d973-468e-9f4d-07ba586bf963", "sighting--5a10cb76-f561-4ae5-9a31-8351216617ad", "sighting--27171e57-da47-454e-92ff-c4e77ad66ae4", "sighting--6a9660c4-82dd-4a06-baf5-0352d293145c", "sighting--759e8fee-04ee-41a6-ba6e-ad3c8a2748f7", "sighting--73dd5b60-54b2-47f6-8990-c967250b2f28", "sighting--01fdeb5b-96c7-4eb2-93d5-11d00982538e", "sighting--344c29cb-aa50-4254-8d97-2fd65739d2c9", "sighting--bd61ee95-c4d8-448f-a4e3-45d51eab8e3a", "sighting--601fe69e-0aaa-444b-999e-e8a5411ad887", "sighting--73f651bd-0d98-429f-b58f-508aef082317", "sighting--b8767171-1516-461c-8522-a7860f4e7764", "sighting--c4d119e4-e10a-4d1a-8e20-8be7df6d272a", "sighting--b7631656-b948-4a77-a540-4de7efaa78ac", "sighting--f2a3bac8-6424-4778-befb-88a01f3084aa", "sighting--7434752e-f3db-47d7-a96e-e548aa7e9d72", "sighting--29dc7e57-370d-4a6c-8b1c-39071f90a9a3", "sighting--53a47c8b-6f11-4166-8147-29cf8d8276ac", "sighting--2a441094-74b0-4054-bbd4-0aabe84faa19", "sighting--76cdfca2-9a4a-46c1-b0a6-31db34605084", "sighting--9bc8502b-afc8-4721-ab30-5d2a147c1ce4", "sighting--5f9f6159-2f49-4561-84b0-b81005d75d32", "sighting--8de76b83-4459-41aa-ae11-93b1a932d20c", "sighting--b4079853-83d4-41aa-9fba-6ffd2794e38c", "sighting--9a3be8f3-77a1-46d2-8512-6aeac4a95490", "sighting--45f43ac3-1e41-464a-af22-de3fc53b933c", "sighting--ae81c1c8-1117-40ba-8b37-52d45e79631c", "sighting--34e1f7f0-0af2-4eca-bbb2-ab9ffeda01cc", "sighting--6919c6a9-83f0-4332-b75f-cc5bb3dbf427", "sighting--f84d970c-cc7d-448d-9a05-eb8570470fc0", "sighting--1227d62d-9ceb-4025-a6c3-5839a0201c0a", "sighting--a07df886-679b-450c-b188-fbea0f1e01fd", "sighting--948047de-140e-4f55-97f6-d41f6138c28a", "sighting--8d4e5990-a561-47f8-819c-627c9361be7c", "sighting--a4ca016e-b2f9-486a-8158-92da6a96a7a9", "sighting--ee25a9be-55ff-4618-810f-20801ff53b0c", "sighting--2d20cb0e-c167-49ab-a7cd-18692246af4c", "sighting--37e2e46f-049e-455d-8c35-0ff8a0628e62", "sighting--c2269a7c-c8ce-429c-a8c6-18c04f2abe94", "sighting--cf1ef516-9000-4c0c-8365-815197852950", "sighting--a1a5dbc0-50f0-4859-8c20-75e6859c4f1d", "sighting--6dbe26bb-14af-483c-85ca-fcde4d5e153f", "sighting--4c3f3c85-7419-46bd-893e-e9fa1244cd7a", "sighting--3acdef63-8c8c-45cf-97f4-57f1d7443525", "sighting--039450a3-9fb5-4e17-ae33-f24ec8777fff", "sighting--61ef0c1a-d853-4637-9a83-dee61e79acc6", "sighting--4c813889-1841-4f27-82ad-3b6f243f0689", "sighting--d6ce1f0f-2a0b-435f-9fe6-18da1fd0b590", "sighting--f85fe53e-83a8-44b7-882f-9605ed359704", "sighting--108ad727-3825-4fe0-8a5e-745a7227767b", "sighting--6b155d03-d18d-4f32-8a22-5d5f9c465ec0", "sighting--c93f5c13-7680-4208-9a71-e525022389ea", "sighting--28e6bd99-f981-49f9-8169-5ed794494c3e", "sighting--0e7f0410-7d9d-482d-b5c3-358acf0f2ada", "sighting--d2d70159-4359-4f46-a4c9-ffca4d5c699a", "sighting--579e33f2-bde6-4a81-9514-9d410fe177bd", "sighting--820e7eba-4567-49dd-8cd3-60ca43e357ab", "sighting--37f9f654-2d68-43b2-bf33-f58225f8c9ba", "sighting--b45b0520-2a59-4793-9cd7-3969d44885d8", "sighting--8183059d-3af1-4149-aa94-a7d9c5ed74c5", "sighting--0fdf361a-e036-40ce-876b-d9dba6e66db4", "sighting--d7a4df04-44fa-4374-85ba-ea49c78edc74", "sighting--2b04d1e2-6d84-4887-8a9c-740228338541", "sighting--d62e503d-aa6c-4df6-b98d-2a94012ac6e8", "sighting--7d439107-c175-4123-92c4-d31ec020f5fd", "sighting--446e5b1d-5fc4-4c1c-b8bc-b6a162fdf6e5", "sighting--4e4716f2-fbc3-4744-aed9-6d2349b47efc", "sighting--ef206abc-ea62-4db2-af33-34bf642e5d73", "sighting--45b3ca8f-162f-414a-886a-23e309d9d96f", "sighting--59b6d9aa-ee77-48d2-805b-d351bc3a6357", "sighting--39f3b141-cabc-4ec1-87ed-606d51569772", "sighting--5c940d3c-e71d-4026-a4e5-d69bb58161c7", "sighting--90de85c8-8d2d-48ed-b487-c17ff5179e55", "sighting--2168a1d9-4cf8-4f14-9597-9d5475e97df7", "sighting--8111da9e-2e85-494f-a4d9-51cd293d22e1", "sighting--f651b0e0-d830-4bad-b3c8-442b38d26436", "sighting--a88e36bd-4907-404a-a876-125e4355350d", "sighting--1dfc3c91-a35f-454b-a952-99b2ff8501f7", "sighting--d805cdc7-16d5-4cfd-aac8-1eafef87824e", "sighting--4006e740-5957-40f3-ab4a-fdaf1689c3ff", "sighting--17630048-4bfb-4e07-a929-4c5d679ee3ba", "sighting--da6f67e0-0ea7-4739-88c6-e6877b7ce3d9", "sighting--9e4d2bbd-1b0b-4bbd-a634-c815cf831afe", "sighting--64b2e1ad-a18b-47d7-aba9-662df68868e5", "sighting--22dd58bf-e44e-48a3-badf-e0f5a14642a5", "sighting--04ad6012-3ffb-4972-b04f-0b1b90fa9e9a", "sighting--4fbff995-b6a1-4a0e-94fc-c96ffc0bc0ef", "sighting--7ce63a24-5234-40ef-bc78-ce5970d4e8e0", "sighting--92e7bbcd-bd5e-4c04-8809-67491f467865", "sighting--d0242dfa-cbee-46d6-bb2a-551cdfb018d2", "sighting--a8fa00b3-2c20-432a-a629-ce530d0acd0b", "sighting--45f398e5-b3dd-4b52-8513-4b39cfc57441", "sighting--105d8937-0d2c-4062-8b6d-ff4cda90ac42", "sighting--87c1ae75-a968-47d8-8c63-273c79c05652", "sighting--ba004b31-a16e-4218-aff7-f5a5c363c003", "sighting--815cfddc-4149-4189-b4b5-5583d38bd05a", "sighting--50b810fb-7e89-4fb4-a7a9-c11277bb22bb", "sighting--165df24a-327c-4d28-b440-2d22f4d5e77c", "sighting--58bfa140-86ff-440a-8c64-7268b75e9a84", "sighting--1f4e28d4-5728-4e5a-8be6-0a2c641bd23a", "sighting--b9f3a9a3-e645-4f7e-898b-fb3dffccc011", "sighting--2d436145-c8db-4e64-b511-43ef89d17ab8", "sighting--0f7834df-d73d-4554-b44b-990f15125778", "sighting--8e92dd47-b933-4076-8c80-5d7de8c3c4de", "sighting--2c12d4ec-ac57-4ad5-a0b9-16f48482079f", "sighting--1f1a7a20-8662-41de-bfdf-8734aba2d0d4", "sighting--4e379381-5e22-4812-a7aa-1a74871b6b78", "sighting--5b56704e-4a3a-45b9-b933-d3aa705488ea", "sighting--5051c4d4-b71a-4ae9-b6cb-d029a134af55", "sighting--8389a8bf-86f9-4003-a1e1-03208b59a85c", "sighting--7456a2ad-9403-4589-8fa9-0ec02785e8df", "sighting--02d6d62f-0405-49a5-8337-b50b1a4f1b1e", "sighting--61d11371-8580-4e60-8ab3-cfbdf7864238", "sighting--8d5703ad-a59f-4d49-89a3-8711513bf4d1", "sighting--d9167166-518a-433c-a848-2d455598968d", "sighting--b05edddf-293d-4cb6-8df8-77a774409a71", "sighting--4d0e0d23-d21a-4e54-a17c-89c7cbcc06e3", "sighting--85a730a6-f716-4175-8bbb-d9a58c5568f1", "sighting--0a8e7fef-e162-455f-ab25-75f3bf971da8", "sighting--d51144f1-e1b8-4cba-bc53-a93a82406565", "sighting--159dd090-fc77-44b2-a6d3-9329c97b454e", "sighting--8d9109e0-2b6f-426c-a7ef-49345236fb7c", "sighting--bcca07aa-b639-4bcb-ae6b-35a0f773ac74", "sighting--a283b762-7ae3-4603-8128-6962f5252d7d", "sighting--7cfdf279-c1a0-4185-9f3f-f41619afaf68", "sighting--50366a2a-0156-4837-a2fb-43eaa14ba164", "sighting--0e67d76d-be25-4286-8aef-d6ebc3c3f362", "sighting--18a6880a-b6ad-4730-8429-4d5d1733d63b", "sighting--9ee01c33-2180-4008-ad23-9b14c866cc31", "sighting--c4f1e2c5-3d28-4b0e-a7a9-9eb2528a6478", "sighting--86a9a3a6-404b-4604-a8dc-2194f0c7fd44", "sighting--4b6bd318-a9b5-4ea4-abea-b79ede6702b5", "sighting--5cd9bda0-c474-439c-b0a2-c9498b5cd22d", "sighting--90feae20-c335-454d-b663-63a0a46ad942", "sighting--dae6404c-dff2-40b1-832e-cabfe1b37b30", "sighting--81517cb3-e7e4-4f11-95fb-937b66c5bd30", "sighting--5435d156-96b0-40b3-a243-3d4ef97fe468", "sighting--6761765e-e8a8-4459-80b6-4d15534b3b8b", "sighting--3b9b9e04-29b8-4424-98ba-14c41aa32d20", "sighting--17c6b440-fdb6-4788-8fc8-6946b37c9b48", "sighting--2ecaeb4e-9f93-484c-bb97-6accf27335bf", "sighting--02a27055-01f2-4934-b5c1-eff89c292a0f", "sighting--2c48030d-ade4-42fb-88f3-58aca817a0a8", "sighting--6a95d9a1-4744-4d91-8e7d-4246109165c5", "sighting--2174fa05-c44e-4a58-acc1-a8b1a9925465", "sighting--6ccb9b49-1209-4038-998e-ade53e3a3602", "sighting--1a70e29a-9834-4bd9-b903-e0fe1cbcb84d", "sighting--efd7e0b2-6e32-4e69-8356-de92a80a6717", "sighting--bb6eccd4-366f-407a-bbc4-0188a84ab93b", "sighting--5505b8ab-0235-474b-a90f-4e1e3723826f", "sighting--ca18f263-05ae-45e8-8d9e-be53d1a136f7", "sighting--9cedd9fd-d916-4e69-84ab-712ca785f485", "sighting--b18370a1-6d2f-436a-8ea6-7872021fef8c", "sighting--533babf5-53bc-419f-baa8-80fb1d562483", "sighting--d7a949b6-a8be-4f93-96ec-b5985822d89c", "sighting--5c1130ad-7628-4c68-bde1-4964444b65d1", "sighting--14e196e7-7f08-4392-a758-badd33b1d6b3", "sighting--cdf8a3ee-c476-4c66-8fc2-3bca887f38c6", "sighting--ce8bfaef-b23d-4f9a-b79a-9a4e8ddbb60d", "sighting--f93f9772-e744-4e43-8315-61a2310c653c", "sighting--d34c8002-034f-45a8-ac33-0efb13b57d58", "sighting--e00b5721-8d17-4959-9f88-026448eb7696", "sighting--04c2b53a-c97c-4033-a27b-33aa7dc84d9d", "sighting--c86c977f-9135-47e0-8fb4-6a19b3fa83b1", "sighting--a8ca9152-4829-4b9b-b4f7-85a3857c72ee", "sighting--b00e4e9d-3854-48db-8f6d-92554aa86f2b", "sighting--beb29900-2b08-4ae9-85b2-a85742dbb53b", "sighting--72a7c723-ecf7-4cdf-83f3-a5239f965c0c", "sighting--3f3ea619-e796-4f9a-a066-1e1d7504bf6e", "sighting--7bde9c3b-ea58-4277-9d72-73d28a5b56fa", "sighting--605919c7-1919-4083-8dc0-db3039afc1a6", "sighting--ca066b00-3da8-4604-bf38-3d908d089f60", "sighting--3369803f-7127-4765-8327-1e1ce77cef40", "sighting--b87d3dfd-b469-4746-b21e-589f446883f2", "sighting--ec098b14-2010-4c29-a7bc-515884bf35a0", "sighting--d2f5e22e-2f28-445f-ba5e-aae6a7c26c8a", "sighting--3db9061c-cef2-4cb4-9fe0-7112de38398a", "sighting--a4596c38-7b6f-4ad0-8ee1-3cb888c1adf7", "sighting--dc68839e-dfc1-4b35-ae40-d78432ce3a05", "sighting--a0e54ece-99cc-49d7-8378-48e5a15d9a06", "sighting--e6c9df5c-7beb-438c-9bee-5d2ef80e2728", "sighting--0b20a61c-fadc-4205-8ccc-41805a472b2c", "sighting--0b47d663-7efc-4cf2-83fd-2b0cbb97c93b", "sighting--7b6da9ea-f511-46b7-ab77-1da06ee4a265", "sighting--1d59c706-3672-4bae-96a0-af6596082b23", "sighting--d84c8ee9-0e2b-4c8b-96c0-40cc3c2b6d82", "sighting--cdff16ea-12a1-4f07-b6f9-32d0de9c2fcd", "sighting--7ed4e148-ce8e-4ca2-ae44-0b6b6f418d7a", "sighting--15280610-27df-441d-bcfd-dd6435cc7066", "sighting--09ae9e80-9487-4a68-b643-c9ac68f20d4f", "sighting--22579b4f-f1d2-49f3-b57d-a6a1774b4ff9", "sighting--4a4ebce3-16ea-4f25-add7-e61e6629aa1d", "sighting--1297bd86-ed4c-4518-9e47-f800f7c3c6b1", "sighting--3bebf53d-ba54-46c0-a3f2-e0046bdb459d", "sighting--0df7b571-a1bb-44f9-9bbd-48ea000cb1fd", "sighting--8cef43c1-f5d1-4d9b-86c8-fb7964e6b417", "sighting--c8eed37d-50b8-4698-b741-f1a42c55d895", "sighting--e55ce7b8-106d-4d16-bf04-aee2eac3473e", "sighting--739af208-f318-4316-8e0e-e513e66cd0eb", "sighting--36ad5572-7950-4b90-b38b-517d3e1e4e67", "sighting--ffa13ffa-6c7f-4120-b3df-cf2085ab63a3", "sighting--50b2ddea-165a-46e9-8fd2-80e859815739", "sighting--68a4edc6-f9b1-41ad-846c-ea478f8d3e81", "sighting--a4ee6d4c-8aae-4627-8c78-f738910d6538", "sighting--897e02b6-213e-4960-9aea-db90bcfaee1f", "sighting--f4d3f339-49ea-4125-b3a2-7f276f46976d", "sighting--a64a08c6-bcae-4958-891f-58b2283ef617", "sighting--dd491ce2-9294-4cd2-b463-07d630105c9a", "sighting--3c069e37-043c-4a9d-873d-b643344bc549", "sighting--372f0e01-9043-4eb8-afca-861bd4653a64", "sighting--6eb8fadb-40a0-4641-b5d6-80a045f39c91", "sighting--e6c1a16c-8771-4353-93cf-cbd951538d37", "sighting--883dcb03-0aa3-4542-acd0-4204c69ded0e", "sighting--47d2cb00-7d3c-4de0-968c-834c88a6a54a", "sighting--8c9caa87-27a1-40aa-ae40-8fbee4a36112", "sighting--1afeab3e-45bb-46d5-97b5-493e438dd62b", "sighting--5517228a-3528-4f1f-8e30-950096a3fe19", "sighting--bd397c96-5267-44bf-9ab3-cbc3b2b1c88f", "sighting--2e59c2e3-6199-47cc-a14a-24a2cf86a299", "sighting--34d2048f-e556-4be3-9d8c-4233d3367208", "sighting--faac655c-4482-4a3c-a8f7-702ab1633077", "sighting--8840fdec-a64e-461f-a882-35dd531c6952", "sighting--9d810307-d081-4da0-b86c-75fa8e928d82", "sighting--e18f57af-45a5-402e-a7eb-a846089420e8", "sighting--932a6ea8-e322-473a-86db-b78591ea7564", "sighting--e9ccdfb1-087b-4c35-92ce-a8855d92d7fa", "sighting--fce462b8-b3a4-4b84-9474-1e90bd5e665c", "sighting--9d3155e9-2776-4753-af96-9daabb11079a", "sighting--1b18bddc-709b-4bc5-bcff-0478de2c69fc", "sighting--a9e9319d-5e02-42e9-85cf-64764449fb5c", "sighting--f33617a4-3548-483c-a18f-c1ee1d7b2baa", "sighting--4d8b922d-00ae-4900-b368-0c18b1fdf2d4", "sighting--86b42d0f-3bc6-4718-8a75-8e5f11b2d56f", "sighting--c48f3119-7fd9-4f9b-afe8-dfa9ee6cb866", "sighting--2c5b27ff-19c4-4c98-a613-b57ca48df62a", "sighting--606dbb0e-ba36-4ee1-a390-a73ec456bfbc", "sighting--510c2c34-3768-4d6e-86cb-40576a2dbb00", "sighting--cb227c32-2efe-4535-b869-51d61ac41b96", "sighting--c2233091-0d98-467e-a645-401cdf9d5cca", "sighting--f4c7afd7-c420-46f0-aefb-840425f557d9", "sighting--02444daa-d74e-48cc-af58-5a531dbea286", "sighting--8ae6bbcf-54e7-402e-a3cf-e88383ff4422", "sighting--c6861ce1-7cf7-437a-886f-995cd148b139", "sighting--e2b3855b-442b-4d72-bfea-98697701905e", "sighting--ba12f973-6fad-4ce5-a648-4d89a1cf413a", "sighting--f795dbac-5aa7-4e7b-b40a-4000dbcefbb8", "sighting--82657c5a-a2ef-4eaf-8382-4ef28f4e301b", "sighting--95e6bdad-53ad-4f3d-a892-be5b7edd8324", "sighting--bdab7d4e-ab4f-4ef9-ab75-73228d7a134c", "sighting--2ab34797-b52d-40fa-9805-11f057d3d71f", "sighting--f0393fe6-addf-45c6-9861-5ac217ea5728", "sighting--78dcd9a1-52ac-4aa9-9c61-8482af6fd034", "sighting--7882d1ec-4859-4d7b-88ab-8f2e76e86c3c", "sighting--6e0a66b7-d43d-4a5e-84cd-b0368126f0ec", "sighting--a896d782-ee87-4222-877b-40aa9ec51af0", "sighting--c8074e26-bd81-416e-b56e-510c8902ad59", "sighting--de31fdbd-ed0c-4e94-85df-9c27ffef640e", "sighting--2a15bdc0-c808-4978-aeee-23d4a32e8be2", "sighting--8d96930d-c919-4759-a428-9564233af6db", "sighting--45fae50c-8b00-432d-9823-566f0446254f", "sighting--c4c49741-9827-420f-b19c-31484db3fa75", "sighting--5fcb3900-c5cd-4c10-8640-ef8f81a91d47", "sighting--cc9da743-cbec-4ae1-add7-e5769023f680", "sighting--a6c76eb2-8c6f-42a4-add9-357c3082680b", "sighting--6ddef012-a188-4c85-9fe2-a84117a44fe6", "sighting--e8e627bd-f176-453d-be44-d17aa5305feb", "sighting--be998414-46cb-47c2-9dda-06e5274644f7", "sighting--145b73a3-81ba-476c-b8e6-7ea5013e5200", "sighting--a3b64b7d-f8fe-4a35-b522-e4a293d9adb4", "sighting--66b816c0-4e33-454f-8ecb-97ab1ea9eb8f", "sighting--dc0d209d-3fab-4644-abb0-fd86b2493266", "sighting--d1415de1-e7ac-4dac-b715-d82fd3361f72", "sighting--b243473b-1951-4808-aa37-cac00dec3e00", "sighting--b50f3fe4-3f08-48ea-b7e8-3c630e326da9", "sighting--964c2c8b-dea5-43ba-b8b0-d184c230f040", "sighting--2e9a038a-1023-4fea-b005-97dd6e337d05", "sighting--b5ca2947-cf9b-495e-aa99-a5961987c719", "sighting--13955dc0-c633-4caf-b71a-4b82035cbbb3", "sighting--00bac6c8-0ec3-48f0-899d-849135241617", "sighting--fc906ec6-f8cf-4d26-87d0-2a78bf77e78a", "sighting--81f0453c-8f25-4b38-aa1e-c82eadb05186", "sighting--12b0db7c-8b32-4c48-b4f9-ba97d2076e26", "sighting--efec9c7e-198d-45dd-b682-12a4a695247b", "sighting--12e7296a-364b-4e5a-8414-1b6757b09d31", "sighting--220f6869-9aef-4ffc-8025-ca4bf26c7485", "sighting--2411acdb-5442-4433-8156-9cd0b0565605", "sighting--4a450782-a881-4b02-8895-fa331c19a79e", "sighting--930f9720-d0e8-4483-81d9-c02d2c581a0b", "sighting--3f1c0530-e5f2-4328-b8a5-8473917e28a5", "sighting--6df8b326-0948-42f0-afe8-efd44a76554d", "sighting--d92374e8-b49f-4a1d-94ea-87189284274a", "sighting--862fe4f7-e687-4145-8583-edcdb29e75db", "sighting--6e9bbe5d-9d41-4b3b-8c98-0bafe48532c4", "sighting--80396d97-da16-49db-b590-178331dc2eb5", "sighting--eaf1ddca-d76a-4a28-addd-16dc485b5531", "sighting--f9279f25-e44a-48ef-8067-f4c65102514d", "sighting--04bb179c-3e84-49d1-959d-67e3031a5ef6", "sighting--b05a0eca-69d1-43d3-a49a-6fd951abef63", "sighting--5f1426ec-a981-49a4-81eb-3e55de8c1661", "sighting--96d2c20a-f136-4fe0-8fc6-e2ff4f4ee7e2", "sighting--143ed8a4-e7dd-42f0-a7b9-e03bdc7d9a35", "sighting--fcabb72e-7b02-48de-b801-6327a5ee52c3", "sighting--a139168f-36a0-47ad-b062-a4961d27021d", "sighting--551f090a-1b55-43f2-85d7-e7b4e27ea607", "sighting--bb3d9b75-1cc1-436e-a297-31fb2f9c9a7d", "sighting--72a3b696-96fb-496a-8594-40f722ff608c", "sighting--5bb98e56-19be-4958-9187-d7b5ec8816e5", "sighting--596d088d-85bb-4806-ae8b-cec86ae77c1b", "sighting--6c8678f9-7c7f-4c8a-b7b3-4698f422eeb2", "sighting--c5f92810-0541-43e1-85a8-d3cf4274438e", "sighting--4cafd3e5-31af-4bf6-9c4d-0e993a5a310a", "sighting--46fb7d28-58d4-4bc9-af55-d23a5372d472", "sighting--7577f5e1-95da-491f-8fcf-c68a4a51b2d0", "sighting--86050259-f330-4bd9-876e-498c2da2e365", "sighting--53eb1e6d-953e-45f4-bf05-a11515310a9a", "sighting--b6ff5590-ba95-4edb-a75b-53656daa0b3c", "sighting--336c8270-ecc4-452b-9b66-5a6124dd64f5", "sighting--3cb6ed0c-91d5-4674-abb1-4ab6a4a3a75a", "sighting--668770b0-dd1a-498e-9316-6987a3f034c0", "sighting--2d241eb0-95df-4728-b0db-da6a21e540a5", "sighting--1f83ef17-6258-44e2-90bd-09dd184abd8e", "sighting--ea4dd4cb-33eb-43ff-a2d8-178fd0fc1f38", "sighting--ad16cd84-f192-4462-892e-29cee1516d76", "sighting--8b50f5b5-00ec-405c-9a73-71e1d4fac87e", "sighting--c8068a1c-4425-49f6-bd35-e200f75e43e9", "sighting--a3577bc1-db20-49e5-bf10-6ea9079009b8", "sighting--938b8b72-1d95-4e69-87f1-8300a2433e1e", "sighting--2bd14cd0-3a4e-4a0e-83fd-3ee562d31d28", "sighting--e30b92e0-b6fd-40d8-996f-588eae1b59ab", "sighting--b86d7726-d8ca-457b-95cf-9b4061970407", "sighting--e70fb4b0-d368-4ed5-a96d-a49675be5a8a", "sighting--5ff5ac4e-8665-403e-9797-2134a74f484e", "sighting--4f872c15-4fbf-4cd3-8cb6-1cc9af28fc24", "sighting--e2331924-810c-4bad-a0b6-c5fc01b732e5", "sighting--12d76152-5439-4af0-a4b6-484565218c1a", "sighting--45b70445-4ea8-4e50-9ee3-ffbdaa9a1676", "sighting--2403aec3-cb0d-4f32-b438-8e293bfd4034", "sighting--db77065c-854f-4f4e-83ae-8ea4b7ce00e1", "sighting--cba09d70-0f33-4067-878f-a83d6902c260", "sighting--cb095e6c-ba9b-4748-81fa-13b6cb72e181", "sighting--a12a9f52-947d-4602-bb45-1c8def6f0722", "sighting--77ea76f5-32f3-4a23-82ed-5f6754353a14", "sighting--c85e97b2-2430-45fa-9074-e4f56d5f94ec", "sighting--e09f55bc-3292-4bf4-b63c-b155341f176c", "sighting--454e61cb-bf42-4890-b663-b652fc94ca04", "sighting--c52b891d-485e-49ac-a284-68b2b6724645", "sighting--b25342f0-1800-40af-8487-3ec5420bf794", "sighting--e9493f5b-b8c8-4c0f-ad9c-78d0e0d85f6b", "sighting--535961c3-3303-4833-8f52-86a0edc2a480", "sighting--3cc32256-63c0-425d-b1d4-6504e271d7ea", "sighting--e97388a4-5de9-4399-8050-889074342b3a", "sighting--76648392-fdaa-439d-a086-7d3926174777", "sighting--10eed23f-6995-4d3f-aee2-294a29163f44", "sighting--24c0bfd8-afeb-4849-a646-e104bd3fe69a", "sighting--f4328de2-91d1-48e5-940f-068278261277", "sighting--aebc12d3-b26f-42bd-9ba3-e355e7561f40", "sighting--f2d10d58-f25e-425b-b460-16bd3f10e326", "sighting--25ca3102-2a58-4b04-a217-771461c41a12", "sighting--80373bde-8c87-4af3-8d02-69ab836bd9e8", "sighting--d059cb70-82b9-412a-85ab-dc6e27fa3fe8", "sighting--8357b609-bcec-41c9-86d4-2dc48cdfb495", "sighting--db17a319-cc9e-4b35-942d-6763cab6f200", "sighting--8a2a313f-0341-4b19-a254-0434a997655c", "sighting--f1405792-23dc-4a0f-a838-cb7d5d388a22", "sighting--2d128d23-3499-4d19-b302-b279db77c67c", "sighting--2860e001-6b5b-42b1-8f73-313b533ccedb", "sighting--7d5f985e-9544-4a96-b5f4-a6c73cf60a37", "sighting--f1578a05-c073-46ce-91f9-05ffd7b55b92", "sighting--6d5677bf-d939-4e04-9716-dd0ffe1b7ea0", "sighting--d9417741-f528-4a97-9276-4a6eec0d64df", "sighting--3c5b2be1-2142-4764-8930-e672485aab8d", "sighting--c43e6afe-971a-4e18-851e-1c4732005961", "sighting--de8821c6-9bfc-42f1-b07c-1babcec1c23b", "sighting--a840cb5b-de9e-485b-a95c-bd885148b851", "sighting--f94b0470-fad7-49f0-9a94-765d62c4a620", "sighting--8c07de4d-e970-42e2-b97f-df74c98732e3", "sighting--3458cd9a-b221-499f-b9d4-58f9c78693e7", "sighting--f372afac-f2f7-4f06-a402-919ede71e0c5", "sighting--97dc3e96-81b8-4c10-a67d-007c156d62ef", "sighting--07ed2a62-1337-4eea-9d6e-f750668ec953", "sighting--37e9fc21-d842-4c04-aa96-f345d17f529f", "sighting--0e7e03c6-e4a3-42d7-9d1f-060d6cb732a8", "sighting--ef328bd1-5793-4fd8-bd2c-ad0e1ff2dae0", "sighting--c0d06002-5b95-4dbe-96a6-1d73ea00320a", "sighting--4a1cfdd1-b31b-41bd-9b11-dc9745ad2bba", "sighting--49b9de3d-6ac8-4a0a-9cf2-2f00838b9dde", "sighting--1bf4dd80-d38c-45a8-8e0d-6f5005c6d80d", "sighting--66099f6d-82aa-4b51-8810-889a77d5b845", "sighting--6add3578-cf72-45bc-9b71-c032dc7d0f6d", "sighting--37dcb921-59bc-41df-877a-23192408f9b6", "sighting--606e1534-5fc5-4a4f-86b3-33e52b2e5627", "sighting--17e0ef99-0ff4-468e-9d0d-f860f2de8026", "sighting--ded97d0f-eb82-47c7-bc70-97aa6cf57cdd", "sighting--f73b6384-af7b-4000-a165-1b1838d99029", "sighting--b925f744-7bbe-49f3-893e-c497cf25a97e", "sighting--58fa59ff-9a95-4fd4-b50c-0b579f965180", "sighting--a73a090d-51b8-4b30-ad10-f1b26dc1d656", "sighting--86152a1b-6b96-4196-9e3e-fbfbe7444a78", "sighting--222de46e-4c29-4372-8ebd-abbfd53db97d", "sighting--b83a294a-0f2d-4ca7-8f94-f787ec31bd05", "sighting--f83eeebd-206d-4e42-af11-ab11d6972a3f", "sighting--8a589470-bbf0-4f45-b65c-90b0cba58c83", "sighting--f380f018-3992-4302-ad29-6fd0d7dc6d96", "sighting--270a4cd0-f65c-46c3-b293-27a90fe954c1", "sighting--c135a628-a4df-4e5d-aad3-1a19b76cf043", "sighting--3aaeb480-5fce-4a14-b54f-b7918041c66e", "sighting--5feb1586-8d80-4713-abdf-8c4795ff1a8a", "sighting--394e51c8-142c-4d52-aa40-c5ebb9771b78", "sighting--23c0b5c1-a126-4990-908c-6f23280452ac", "sighting--dee4feb6-503a-4b64-a6f2-cec8810ec2fe", "sighting--8cdbbcd8-8f65-440d-9eed-599a3d279a68", "sighting--f370cf9b-79ee-4ced-8696-d0c56278dd05", "sighting--16e29fc9-d963-451e-a50a-dd576f09aabe", "sighting--40298df9-e17f-4a6c-8902-d70ae5f7818f", "sighting--d0449266-945e-4f13-b740-ca1b46277360", "sighting--c5b93689-d937-44de-bfeb-bef2579ed90f", "sighting--4a500183-e44c-487a-8571-5ea4194c7449", "sighting--f72ea209-d8e4-48d2-8601-912b47c8f6bf", "sighting--d70486a9-6ef8-4c09-82a7-0b1e5de5f1dd", "sighting--66043e6b-2f35-4b9c-b0cb-968b17de0cf3", "sighting--4b38977f-c9e0-4b2b-9fb1-160b1c80ecbe", "sighting--213e2af0-d307-46f1-b367-45d78caf5229", "sighting--9e992eb9-5ba7-439b-a161-cfb0b28cfdb9", "sighting--7f0acda7-258e-4445-ad3e-253975dcfa06", "sighting--14458176-77d1-44dd-b124-0067cbe9f313", "sighting--5a02195e-2726-48d7-8650-56f10d8aa6de", "sighting--120f93db-d93a-4a11-aa8b-a6a01ad865d9", "sighting--ad277a18-28c0-4e98-bc09-c3394ca9e4c4", "sighting--78a9fee4-e442-4b1a-8efd-00eb07cb1bd3", "sighting--6a511d9c-21dc-450b-9344-e816aa0037b8", "sighting--fbb03a45-0671-4950-9c89-f85f3c28ac59", "sighting--2dd483c0-d27c-4dc7-a8f1-508f5c231a43", "sighting--be2f45f4-5e53-4e5d-aa3b-7220a42e4d8f", "sighting--eeb075c8-7e06-4bbf-a143-78e30de09eea", "sighting--48e8788c-cbd1-4a84-b998-fab1464a070e", "sighting--7de160f1-cef8-4732-8fbf-a10752eef4de", "sighting--84de46c1-f861-47ed-a600-ed88ffb40bc7", "sighting--ba18097d-51c5-4021-8b72-ee3701444694", "sighting--8c2d2f70-627c-47e7-905e-c98c35b96177", "sighting--fb8d5a38-2bfe-409b-ab67-2ac7bd5ce25c", "sighting--da3b1ac9-509b-476a-a18d-7d9713289b89", "sighting--03511e2f-2ea6-4cbd-8ecb-b8f27a3487ea", "sighting--d62eb0a7-6372-4fce-ba25-9d6d185e5afc", "sighting--b51965d9-a629-4488-9585-687aa43f649b", "sighting--22d62e52-11fe-48f9-bc38-5ee5232e2702", "sighting--55f4329a-2e8d-4b86-81c5-f4cd52e34b3e", "sighting--2a95356e-3bdb-41cd-ad55-26c0964a61c1", "sighting--e67c94e7-5a12-40ab-8e4b-1a3ba0414534", "sighting--cde2ad70-13e2-4531-b49f-67f34b27a853", "sighting--27e562c5-002d-4a01-a7db-2a9dcb647c75", "sighting--745d76d4-6c09-48bb-8ac1-a8fb76a57673", "sighting--0465d470-e8d6-43fe-acc2-c15730ec98ef", "sighting--c31eb0f8-d1e3-4937-a278-f69b15591809", "sighting--a100785c-d5d4-400a-9154-18d7b781924d", "sighting--ca838d8c-2e3d-48b4-89c9-387c2c75590d", "sighting--19fe2cca-d3bb-4d66-9642-69843d4b86fa", "sighting--19ad6e29-8e77-402a-956e-7c4497adf03e", "sighting--ef55d68f-8d8c-49f3-be74-a2be9c228f55", "sighting--006d9b43-bdba-45ff-b4b9-36395ac29f9d", "sighting--71974e7d-2749-4354-9c75-160ac1b7f24c", "sighting--afe26f4c-7fec-4c69-8585-bc0b0d3222c9", "sighting--071376e6-7b80-480e-b7a8-63ca2d73132b", "sighting--674d7f50-1e31-441e-9b5b-ddbf8aa11ee5", "sighting--84b6d7f5-2a54-4c05-b529-79830cb4c862", "sighting--32af8b33-7afa-4ee9-bbbf-799488f156e9", "sighting--754f48e7-1e9e-4d8d-8281-4219eed09784", "sighting--0aa446bb-8335-4b5b-8580-a5eb9a031648", "sighting--392c75e4-fb1c-44d6-bb70-09117ba11f6a", "sighting--fc6047e3-67de-4b57-8c59-c25a746355bf", "sighting--0d752ce3-7812-475d-accd-f3882c65ee13", "sighting--a413bb64-fea5-4042-b113-6995fff40db2", "sighting--a780df56-4250-41d7-9443-825ce066ea31", "sighting--043480ff-c1cc-4934-a5a4-b28ce94162e5", "sighting--2b001970-0400-4003-ad18-d64ba9d0ce1a", "sighting--e574d360-01b8-402a-ba31-b7f5da1730e2", "sighting--3ea53ead-f237-46f0-ac79-ee8293723bc9", "sighting--ef44cdba-6c17-4fac-8d93-56c3dfd93e9c", "sighting--e1b17e11-b8cf-4095-84b9-769fd40f395a", "sighting--cef8ccfb-6ac3-4107-8ed6-a84d6db27f1c", "sighting--8e1e8a42-1e81-4ab0-a5d5-c6b33c705a6e", "sighting--dccab1ee-a6d0-4290-8477-59cc55e75cf2", "sighting--6d71f08d-734f-4c25-be6d-a7415ad4ffad", "sighting--a3010e82-2a48-423a-9510-610126a4c735", "sighting--067c8ae6-82ee-4d98-9404-7bdf867b42b9", "sighting--92c80d42-7f7f-4e3b-933b-350cbb5be4a9", "sighting--77a81cdc-e82c-45b0-bdcc-eaedc5d4404b", "sighting--36edea13-6044-40f2-ba92-13c1b3f01ca8", "sighting--e4554c73-bbab-4eb1-adf5-f35a74c665fd", "sighting--e486ea89-58c6-44c0-b467-e6382e3c8dc2", "sighting--7fbd4228-11ed-4dcb-9951-cd80c8cfe0fd", "sighting--6da11a51-d192-421f-96fe-e21b127989a1", "sighting--8aa4e5f9-0be1-4c59-84b4-f7da26bffd33", "sighting--d76968d0-f26b-4a23-8c27-79f40427289d", "sighting--1265d308-6e6d-4bf9-b8ae-de036ff93bda", "sighting--232ba713-4a8c-4a4a-888d-2527877a2275", "sighting--b0dc1d3b-ebb8-4a21-bcab-c440d9574671", "sighting--631d4c5b-ce8d-4346-a9c8-f0fe9206a7d6", "sighting--c75acd9c-11f6-46c0-8f65-b535cff0d2a4", "sighting--5538dac9-2771-437a-917f-ae5466b96a49", "sighting--15fe3e8a-4fb6-4539-b3d3-80dd3f58574c", "sighting--0aaaf119-49d5-4d5b-bf84-3593ead518f8", "sighting--f7974b0d-ce58-4b8f-ae5e-d927f84416ff", "sighting--3cf79ae2-5135-4084-a590-6ed495931e73", "sighting--7bcf42d1-dfcc-4423-829a-7edc2d7a6e79", "sighting--6517efad-25ed-4749-9d2c-3501e484b139", "sighting--c05ae5ff-7c77-4b04-a927-0f2de29d1768", "sighting--16501c26-3da7-4567-a506-83187c9c8d42", "sighting--8aec4cec-d8e0-43f0-8bba-0a809049bc01", "sighting--54c36713-89f5-41ec-b39c-a8cab2c16390", "sighting--b9af08c8-a76d-40b8-adee-9bbf11ff47df", "sighting--12c10ba8-1160-4b77-a4d1-11d4f6af3137", "sighting--021d7492-0c19-4c4e-b789-ebced3790e0f", "sighting--9ca4ea06-4ab3-449f-bc4b-9d73a886bbc6", "sighting--a55c61ec-661c-4996-b814-a6c17a425423", "sighting--272c6f4e-0be1-47ea-b84b-a3fbb88661e8", "sighting--6c2fbf16-3b84-4742-80f0-6107e7cb710a", "sighting--64ad7e86-4b58-4833-93a9-9d52a3645e1e", "sighting--99555ac4-6027-4c42-ac95-6bd18846afec", "sighting--f85c58de-71e0-4819-9117-0678db4db3f6", "sighting--98031db4-674e-448e-90ef-b212da53a46d", "sighting--10b9ddc8-ce73-4f94-bb30-6e02bd2a1c5a", "sighting--0aab8964-e81d-4378-8c4f-cea652a62e60", "sighting--eea42c16-d273-4761-a9af-25366035a4e8", "sighting--46da201f-73c9-4040-bd1d-0ef72571336c", "sighting--0f9ab79e-b119-4a22-8eec-b05595fd312b", "sighting--6b5d8e44-b9c0-4949-ae44-5a0c9f8a709e", "sighting--f16719b9-cceb-4de5-8039-dd497d28567c", "sighting--c8e5b1df-6c10-4553-9107-730fd6238d47", "sighting--f84b61bd-d1df-4571-9eec-76d356285959", "sighting--2b06f7ec-d2fc-4e93-aaf4-2e2441195301", "sighting--13a13280-c4b9-42c5-a3c2-8d4cc3afbd91", "sighting--6748be77-8233-433a-95ce-3d23d5b9faa9", "sighting--20eb609d-4158-4d28-96fc-a9c14fda1ac6", "sighting--e0ba9093-12af-4fcc-82b3-a08d0e390281", "sighting--d2138cc1-2880-4474-9cbf-618232b144b5", "sighting--b08ffbe8-69dd-49bf-b9cc-242bd2171cad", "sighting--6a197535-0554-48be-b962-4312adf8ca42", "sighting--f3f9f6b5-b890-489d-bce6-7992a7f50189", "sighting--132573bd-f835-4c16-b8e9-069ef31099ed", "sighting--87ad4166-058c-45f4-b854-4b1dbcae76f9", "sighting--4408c2dd-447b-4e04-b3cb-389aa946a3e9", "sighting--a06ac7a7-ee4a-4788-93cf-9a7f649a624e", "sighting--b8cbcbcf-7ff5-41f1-a241-c989032c4478", "sighting--4e7229d9-87c8-4706-ac8b-9a719e8c9853", "sighting--c0beec8b-e2cc-4c92-84f1-9cf43313fd1e", "sighting--2eebf2fe-8d49-48c4-bc83-c12cf54b13bb", "sighting--12d7c5a8-2440-442c-86a8-bdb0140df2a3", "sighting--61637020-ef9c-4d65-ad71-11f2fcd94e31", "sighting--4c413e4c-7b40-4068-babc-71d962b7f7bd", "sighting--4242ddc7-fcdc-4631-8d3a-0b8978320293", "sighting--551aaa77-3e52-4f67-be75-df7af9eed967", "sighting--10a50311-63e3-40de-bd16-3ffd7a5d6815", "sighting--f384e451-b3e2-4b7a-b934-ad083256f41b", "sighting--14fe67ec-76ff-4a14-9c18-5bf16fb474de", "sighting--d84d654c-660c-408d-9f89-bf34c8ff46b7", "sighting--6fa49649-3048-478e-b20c-47d57e0fd5c6", "sighting--a509959b-d8d9-4b48-9d89-20efd2fe1531", "sighting--694df0a5-fde8-482a-aa55-0892b4e5aa5b", "sighting--873210ce-ed7e-4924-8c6f-8eb4063cb09c", "sighting--336d4ba6-7efc-4b83-b730-aa143396e3fc", "sighting--4941e05f-9ae6-485c-9724-3a7e30573668", "sighting--8e50bafd-b595-48e0-956a-15425b3d7544", "sighting--0107130e-7c47-43b3-9df4-1d86fcb4eeea", "sighting--afcf4757-457f-4b32-9c2c-38b152aef245", "sighting--97103eac-e7da-4551-b6d0-7b41b3b12806", "sighting--32122246-f6ca-4fe5-97d4-5feda7a52305", "sighting--5b993b6e-3ed5-4a8d-b9c6-054013c81dd1", "sighting--163122ba-5e9d-464c-99b3-1a71419e4c10", "sighting--4874822a-6c6b-4dab-9ed0-dffd571ef04f", "sighting--29f6729e-2493-4ee6-9ea6-69f5c21ec3af", "sighting--befee8f1-f7a8-4f95-b6b5-21821108010e", "sighting--da3edf4e-c2ca-4853-b223-3cb0dbd00954", "sighting--9c4fcbca-e564-4edb-859a-592e4e0810aa", "sighting--f4535f57-b84e-4eb4-b4e3-f6ec774822dd", "sighting--665cab5c-217e-4bb3-b5b4-24e277247a08", "sighting--de8461ae-3e5f-4853-adcf-8dc11d3d7045", "sighting--b64181a8-3c88-4a06-9ecf-da3a5242c741", "sighting--746b7df2-6022-4c9f-8226-66551ece3874", "sighting--146609fe-d6a0-49eb-b44d-0390b908dfde", "sighting--6f7028ff-5ca2-4c69-933f-2a6cbcf26d6f", "sighting--35f72ecf-235e-4f8a-850b-cc5c465bb7f5", "sighting--1483b757-471c-440b-b43f-d3c7922cce53", "sighting--4fe9e62f-a7c2-447d-989e-7438c558e960", "sighting--65b5e734-e1a9-43b9-adeb-63cc9e8e0f0b", "sighting--7d30fb67-2ab7-410b-87d1-2940d6db5e7c", "sighting--d3f0f62c-645e-4539-9c69-b8ccac2a0494", "sighting--10d38e40-c8e4-4964-b0d7-1df7634e6882", "sighting--021dad0d-8f8a-480b-8566-44927fc0fc11", "sighting--1f87fbcb-f7b7-4c9e-8341-4e7ccf345131", "sighting--dc73f936-01da-460f-9b26-0a23de175503", "sighting--f8a27365-d553-4845-9b62-374e45761726", "sighting--c7303d6f-b2ac-4ef6-a5fc-ef9786df3cac", "sighting--ea5e5a4e-407b-48ec-a4c1-0a54e8850f0c", "sighting--a4579d0d-a814-4e37-8514-8c2488a4b0f6", "sighting--180dca70-2948-4727-929e-0f455a23c2e5", "sighting--ba94eca0-f0b0-4ec6-8193-d580f50422b1", "sighting--7447528a-01f3-45d4-9646-23de211f72c6", "sighting--c8734978-0c1b-4232-bd8d-0c3fa512a2fe", "sighting--a3eb3369-e847-4a32-b535-ccb23026cd46", "sighting--14584216-5480-4190-b661-7e7b95492924", "sighting--719647f1-45ad-4f27-a0ee-4261df07b9f3", "sighting--8b215a99-290f-4b2f-b67a-97f524c06779", "sighting--9de4f931-b481-4c68-bf2f-26a91c47a839", "sighting--9f2e56fc-89b8-4af1-a26e-8ab366695a26", "sighting--74510bde-734c-4e86-b86f-c0036aa45a0e", "sighting--ea770570-b271-477c-8120-77a09b7e1606", "sighting--4f3336ff-73f3-4803-bc4e-b6c41e6ce75a", "sighting--eacae359-199c-48ee-bfb6-1e2d1db0a0e1", "sighting--1fd09058-e550-4ad4-99b1-2c63e911e16c", "sighting--ddf168ec-2d36-4140-99da-894a17030ff7", "sighting--7a349648-236b-4b10-9505-de38a1a3514d", "sighting--6dcd909d-8b71-4df4-a16f-f6a223d06681", "sighting--f5677dda-a988-4c93-81c5-3cd86e28c141", "sighting--1c30b2f4-4ffd-426f-b09c-a675f33e3c9c", "sighting--e09e1c31-af26-4780-8383-15dbaf53a6dc", "sighting--907bedf6-2f94-40fa-ae38-22f4d52c5eaa", "sighting--53019f8b-5122-4cd2-8256-82d21eac9c34", "sighting--e54cc8d6-d380-4c87-b642-7c1b7ab936c7", "sighting--2196305a-39a4-4dea-8cd2-b2738e71bd30", "sighting--7c1e1ed5-9095-4db5-8350-d91eb347c18c", "sighting--e0c78369-0e88-41f1-b4f5-0aecb8c55223", "sighting--5e13dd71-2318-4026-9b56-b21be7df862e", "sighting--fc25ee5e-a908-4267-a929-f6c777415e2a", "sighting--87584762-192c-4801-bf70-c646d2132f12", "sighting--cd2817c5-1b12-4fa4-8b13-697819761999", "sighting--acafa949-aba1-4063-b4d4-ab623dadb4ef", "sighting--1092265e-05de-404f-93f3-18d7b8f359b6", "sighting--f7bf0438-0b36-40df-a2ec-daea7021e033", "sighting--9ec44b75-0138-473a-9556-f7514b0b5dc9", "sighting--87206694-1987-4c15-a3ca-acf59eae38d1", "sighting--6a48a857-ac89-4772-944d-f598ce54bf0d", "sighting--3b4ef243-91a5-490a-9c9d-c179ca30b31d", "sighting--cd95cbf0-789f-4b1c-8f53-2e760d0fd436", "sighting--68aa05d7-0fef-4a44-988e-62346c02869e", "sighting--fa619afd-c1c8-403b-a3ce-897822b9d3ac", "sighting--e8d58b14-2b51-4e1e-a8f1-616826199a8c", "sighting--0fd7824b-19e5-4a32-918e-4bbfb361b4a2", "sighting--b8c6c7c2-c684-4c97-ab5c-f649fad0d16a", "sighting--bd4933fe-5f2f-48b0-9876-9efe2b8e2835", "sighting--3ae4bcaa-80e6-41a5-bff1-b243f9bd335b", "sighting--3c6a48eb-53ba-4e86-935b-f76ddef50d4c", "sighting--7090848b-8fbd-4fb6-ae56-3768ac2dd045", "sighting--ccfe9ed3-937a-4314-83e7-d7574854e583", "sighting--365218e0-5543-4e50-b038-4d979d072201", "sighting--3f4f53d1-3d5c-489d-9a9c-592b60474b76", "sighting--00cdd87a-e0a2-432a-982b-3114858dd892", "sighting--bdaa5449-455d-4299-89c6-63402e534583", "sighting--3cfd5377-57cb-4f72-ad25-04735b73a389", "sighting--3f482f79-e121-4b43-a558-3e4289ff3998", "sighting--bdf21b19-0d08-4950-8b8b-67e01be66a2e", "sighting--d4c8ee53-077d-482f-905e-8faa06948c12", "sighting--6a96401b-e490-4cde-b5c6-7a5c109f722e", "sighting--50bde3be-64d2-4e05-96a0-9704d536595a", "sighting--a531bc0b-2584-4941-abde-4908ac249ab4", "sighting--a3c50a70-41af-4d47-b0a6-55e64a095735", "sighting--6ef0ec8e-1cf3-4497-ac6c-e4fcf343c411", "sighting--a0f4a4cc-492c-4219-89b0-67ed0a172474", "sighting--3c7cd783-c030-4529-8e0a-e5ad94896d6a", "sighting--d713a9a7-3457-49a9-b8f3-c677b4c094db", "sighting--a7b5287d-a68a-442e-888a-b4e584dcdf39", "sighting--2157c572-9326-4648-a829-577e3a712089", "sighting--74a7b205-910d-4ec8-b891-7660686d93be", "sighting--f108eaf7-6556-4d74-b6ec-92ae53715275", "sighting--cd327480-9861-46d5-ba36-b85f48407bb0", "sighting--10b6c411-b9b3-4410-bf56-fe52404e7de9", "sighting--d5197124-2d43-4d57-a0ba-34a7839281e2", "sighting--d4e786b1-1696-4f23-b74b-401334a9d14f", "sighting--6eddd3c4-f9d5-440f-b1e7-5c72ff77c6a2", "sighting--af465d08-cfd7-4a22-a75b-309d620a204e", "sighting--95392d27-eeed-4096-8022-a55b5aacf9c9", "sighting--22008715-f437-407e-b2dd-ef2caa264530", "sighting--7bb9e76d-15ab-46f3-a2f4-b09688c55416", "sighting--7f19bfcd-c75b-440a-9cc7-ee92ddf42844", "sighting--1140693b-9f64-42fb-873f-591b184f8683", "sighting--b2120b21-a7b5-42a8-a15a-d12eca24a210", "sighting--5d5cf922-b834-47be-9096-4d0c992d2bb1", "sighting--bbcf604c-2030-4beb-bb32-518c13bd72ac", "sighting--e1042a8d-ee1b-4dfe-8fad-a54697749e2a", "sighting--aad96414-04b3-4dd5-aef6-b1028292d1f6", "sighting--f0066c92-c0ee-4e6a-8ec7-ff9b55ece172", "sighting--a98d64c7-5fc7-45b9-b31a-6b8fcbbf74d0", "sighting--53752d9a-f321-4d61-9f45-b0e1ce6c406a", "sighting--45f8af9b-a4bd-42b7-9e20-2c8de800addc", "sighting--b50bbdb7-d938-4cc3-9cf9-5df80e12efcc", "sighting--bf831437-d7e0-487f-9238-396d32367c29", "sighting--8450ea19-c8b1-4cab-b3ad-598a4137a3ef", "sighting--5da89443-d1d6-46c6-8652-4903766e4c53", "sighting--c0bce1ec-6808-420d-a531-b7ff84d42c6b", "sighting--b461e9bd-fc6d-4dd9-84f9-857e5d357744", "sighting--bad7665c-4b19-4c52-8927-b41c09c2592a", "sighting--9a5fd3b4-492b-43a8-9206-f53082657649", "sighting--c623bdda-4145-456d-b89a-481fda5b6844", "sighting--89cc0471-df89-4351-8e77-5995229c7d97", "sighting--c3ce6cf6-926b-4b1a-b149-663a40ddd37f", "sighting--b0497391-e414-48ad-8cee-9614f14a3a91", "sighting--d6236dad-4cff-43bc-af33-3982c8814dc9", "sighting--0e3e5ee4-bfb9-4506-8af1-30574d501618", "sighting--26b17ff7-19ca-4800-8f6a-bde1fed6a3f0", "sighting--d0a78011-742d-40aa-87eb-e951b15d12f9", "sighting--bda0bfbb-50d0-4801-a7f8-177f71717415", "sighting--f9c0fafb-6e37-4e15-a6d4-c68b2b6903c9", "sighting--c39afea7-30dc-4d70-94e8-118ac59f0dae", "sighting--65d7e17c-8a8a-4622-9b1f-87e9d450555b", "sighting--1c3cda89-6ce6-4964-a655-0df5f93c73ca", "sighting--257812fd-1007-4ab0-a9fd-27bd98a199f6", "sighting--264d9e62-fd73-42c6-ae53-ef4107747017", "sighting--cb6b993b-02df-406e-b4de-8ee42bf9ebf3", "sighting--eb384bc1-363e-4ca6-bacc-e7ab844b5217", "sighting--aaf05f54-5092-4794-a9c4-6dc63c212a85", "sighting--481f9236-1ca2-4792-b5e0-f781e45f8e42", "sighting--88dd3643-9397-4e00-9747-8de60b9136fd", "sighting--c73c8478-b794-4730-adb0-eea6ed56a07e", "sighting--fd351853-8f26-4211-9282-de205acd51d6", "sighting--d4b82edb-20b2-4bd6-952a-72627bfdc71d", "sighting--16691308-3025-45a2-9faa-575f5af770a4", "sighting--6e497e22-7fb3-4d0d-99a7-20f8ff14a4f3", "sighting--7a679fa9-52d1-4c27-a8e0-2c06690f424b", "sighting--993b3ab6-bf0b-4219-9f11-fcc4256abed2", "sighting--88b2e643-3ba4-434f-af3a-13cabd389927", "sighting--77af2df6-057a-4b9e-9e3a-1e406da70884", "sighting--90cc1d25-a54e-48f4-9f74-a88b23af34e4", "sighting--32659770-57b6-4401-8e2f-bbdc6edc503d", "sighting--e19c5f0e-6553-44aa-8771-5679a5e99abf", "sighting--a632c80f-e5bf-4553-9031-3a4b8c71c06c", "sighting--fb8020c2-a6c7-4bfd-8d1d-433156d8bf12", "sighting--f16af743-f51f-44e0-a8dd-204b0dcc58b2", "sighting--19c7c501-4bb6-484a-bccd-90931d1630ba", "sighting--acb145d0-5317-4d23-a87a-5ddd37d2158b", "sighting--63b7563a-2e58-4106-b6bf-d855010a8429", "sighting--aaba032c-4b54-4ea3-a87d-e2d82f03d6a9", "sighting--68607bee-8c18-474f-b7a8-f63afbaf75ae", "sighting--cf82cd33-4aa1-4abd-9d65-bd1a372b5ce1", "sighting--82da5c5d-9f29-4d93-8904-43d4c2e0c918", "sighting--ca0877f1-0fb9-47d3-a8fe-070276170ef9", "sighting--5d342a21-3d5b-42ee-82f9-523ba5399b78", "sighting--4380113c-4e7a-42bd-b45e-4c802a95c783", "sighting--f8ef043c-c53c-493b-b225-36abe35422fc", "sighting--813d7f8d-a071-4b11-84bb-8b8dfa4fabbb", "sighting--11c0fe88-155c-4e6b-b943-b2622c8883f1", "sighting--5c2ba5d8-0522-4353-8aab-084d6817c34e", "sighting--cfeef8fb-1b56-4622-901c-9e1e1e235df9", "sighting--5f798854-d881-4d48-98a4-e8ab58fdec3a", "sighting--3034569d-b811-4041-9b65-e0f3428301d5", "sighting--a7f23b11-44f3-4dea-ada6-c8e61456c352", "sighting--d0bc8a5a-82c1-4f52-9f3a-ab385174bc3c", "sighting--c81471e3-ccc6-4beb-8f79-c3ea372b2a95", "sighting--8f962cdf-4e72-4c53-9d9e-69989140026c", "sighting--21bf2592-e4f1-45ba-bfb2-4cce65241f50", "sighting--ed40190c-3ac6-4f4b-8491-cb9a4f1b60c7", "sighting--0183ed73-0c28-4c91-9ee9-254bc660121a", "sighting--0fb4ea3c-a7d9-4119-9149-092f83779de3", "sighting--586331b8-ffb5-44d5-82e1-2a0c8583c8d1", "sighting--445a98db-0f33-4fc1-87b5-df54f9c73930", "sighting--a325689b-0330-4810-96e8-9540416bbbd0", "sighting--04808b95-d66e-4a7b-9990-3584eaa1e17c", "sighting--54825b95-8ce3-4053-b1b4-ed5a869987c5", "sighting--dcdaf4fd-00d9-42e7-aed0-9512739a1f9b", "sighting--f2034c2a-2f56-48bd-b01b-84b5603b2333", "sighting--4ad321ca-2908-4c01-8af9-9052cd37a046", "sighting--13b2a76b-72a3-4f9e-9170-17d79b91b80a", "sighting--34b9b22f-3f78-46dc-b8fd-378c7e2c566b", "sighting--fab74c76-38e8-4a13-ad9d-84ec540ad3d8", "sighting--2c419f2e-5466-4993-88ed-257a17d6d9e9", "sighting--4c95eb37-b496-4230-bd60-ccac51ab9b6e", "sighting--e23170c2-12c9-4f5f-97f7-3ce5a2a11a28", "sighting--6a7276ce-7abb-4c50-af00-3b9b665097c1", "sighting--bfe15602-38e0-4320-a3a3-bc63943f737d", "sighting--d9729288-c486-4f98-a6d6-21c4bef89d51", "sighting--ad907211-5165-43ae-856c-42e02de844be", "sighting--ea545ed5-ca6c-4d42-9dd1-3f7fa9aca654", "sighting--5797d7d7-8823-4fbb-8e6e-97e07982e79a", "sighting--93e70df9-2a92-4173-9493-30707273d8b2", "sighting--a2a17d2b-8f64-4d31-972d-65e38976c063", "sighting--a71120a1-a40c-4402-9880-930a8599a4a1", "sighting--a5df67bd-e2ba-4ba2-b4a0-02043ba1e8fa", "sighting--91a1ad17-b312-44ca-bffd-3b81c0f26f05", "sighting--e728d396-3ee8-42f4-9a7f-968b61a8eb8a", "sighting--3a839ec7-b1aa-4c6d-9834-77c43c68ea12", "sighting--8e0807f1-5bc6-4999-b61a-4d4141f38edd", "sighting--6b06dcbc-e400-49a5-8a21-94f96cbb4757", "sighting--9df744f1-dc52-47a7-b26c-16896fd9c591", "sighting--0d853ecc-06c8-49fb-814d-14eb75821db1", "sighting--53f68ee7-6184-476a-b497-1f34ad5f02f0", "sighting--c15dcbea-a7b7-4fec-860a-be7273d1c936", "sighting--9650cb62-8001-43fd-aaa0-d47dee68f20d", "sighting--81550a01-f202-4c45-9dfe-ef41c4349f1d", "sighting--d1ce58f4-45e6-4dd7-91fe-e2faa3e447e5", "sighting--e0cd2f26-2ad4-4ab6-bb77-03f5c1ea6664", "sighting--89b5ac3c-13a2-4f55-8a90-27c3704a43fc", "sighting--e684d9fd-2fc6-477a-9e1a-31e8ba01598c", "sighting--49c72f1b-423b-43a3-8585-a5b89c9257b5", "sighting--8a36c444-d36e-4516-b24f-98397cf13f69", "sighting--aee22add-c869-4fb6-b30a-a8f379bdc965", "sighting--7b98cbf3-9c2e-4c39-b8f0-f2c3954e8a54", "sighting--694eb044-95a5-4b81-9f7a-2f99244080cf", "sighting--77a62d82-af88-4717-8035-a611d325c6a7", "sighting--f0856a2e-3bf9-494e-bcbf-fbf52015caf4", "sighting--2bd519f7-bdd0-47ed-96cc-37c33ee36816", "sighting--fb14d293-4f9f-46e1-89d4-e4aa543bf1b4", "sighting--6bc19447-d834-4d15-878b-b107a07de236", "sighting--4b177599-6339-494c-be8b-a860479eeaae", "sighting--17870176-cd78-4ada-9d09-fcc2a2e72cae", "sighting--7ab38f0d-c6c2-4eeb-97ad-41e1919ac94c", "sighting--f77366a9-003f-4a87-a792-210d82be8a5e", "sighting--e8c6b303-40d4-4a7b-8da1-a4d34056af87", "sighting--2db6ffa2-d5fa-48a2-98f9-3ffe3d5d5763", "sighting--478cb294-f54b-44cc-9870-bd91b9762102", "sighting--9959775e-33d5-4864-a2fd-2d7d7682317f", "sighting--adfad5a5-2104-4499-9f95-fbbdf7b0f912", "sighting--61873175-392f-4c4f-83cb-c1acbcf9a980", "sighting--9af1622a-9d6b-4d55-a7b4-6e7c58c8d3c8", "sighting--0569232b-4e1b-4b01-88a7-00b2e56cf190", "sighting--dc5692c4-975c-4327-8c2b-efcbc028d702", "sighting--f41d5dfb-a36c-4b4b-ae37-16e19264bb1d", "sighting--e0053988-e067-4b7b-88c4-bba973a0eb87", "sighting--2a5c8bdb-b229-4a3a-b569-6c53d560fe52", "sighting--7200589e-1794-49d0-baf5-ca1a2c75b83e", "sighting--0e87e892-b8d9-40bc-9d87-8127439b5c28", "sighting--d4c55834-94b5-4b2e-a820-d49f0d6c1322", "sighting--de14fdbe-2f19-4d89-91a5-1abf309ab8b2", "sighting--5640f117-7e0b-4e78-9d22-fe6ae907864c", "sighting--e7e50d91-f74c-414a-b27b-3525f2b4df3d", "sighting--2d2f0423-68cc-450b-a366-7bb035efbe5c", "sighting--4b3db293-7a5a-4c2c-ade7-86a6c681d01e", "sighting--562a86cf-6980-4317-a98b-5805b6ccda6b", "sighting--b5fe09ae-8103-4501-bc23-e714fd43a37e", "sighting--c571c117-ad91-453e-a4e6-d78e496a1dbd", "sighting--a9f5f594-e0db-4ee8-89ae-a0dd655e65d9", "sighting--1b440001-e88e-4c74-82ca-7bf3ebc2d671", "sighting--9e999dc3-a425-46bc-9915-efdfeb22b72b", "sighting--911448be-7189-4bbe-9fc4-d49b7da9cad5", "sighting--5d65c250-58b6-4f36-8a1e-bcaa38a85753", "sighting--3be4cd58-13d2-4b88-adc6-d7f387624869", "sighting--e734f78a-abd0-49d4-8da2-8db7ebba6957", "sighting--8ffaec6c-87f2-400d-b737-1fb66dd4fb2d", "sighting--4fdc4365-c2d6-4643-a2d0-58c2b3021e61", "sighting--1822f17a-401b-4838-804c-dde6cc19abe9", "sighting--4f8c50d7-ad54-4b3a-8d0e-4695c2e25df2", "sighting--254cfaa8-1b1d-483a-8dd8-3f0813e4cc90", "sighting--bde532ee-d7c6-4f70-8101-2c0a61a9f307", "sighting--31e75a56-d055-4f1a-a9c0-4b65a9501651", "sighting--c091e23b-3073-495d-85ac-edf8a4f081e0", "sighting--487b8a74-8645-4c62-9545-3dd20f1a036b", "sighting--e960a421-7587-4473-87a4-f396b5e32441", "sighting--05f453d2-ee79-4a8f-9ae5-4d150f8e4209", "sighting--03847a44-04e3-4cec-be04-a3e6440b65a9", "sighting--5ec74271-f2aa-4ed6-8f0a-5a4cc481e77f", "sighting--d976be77-9cce-4f27-8c64-33de8e4cc8f4", "sighting--b64642e0-628a-4a76-9b7f-14fdd633ba54", "sighting--716a6255-435a-49f9-a849-51d9aceaeb0d", "sighting--488e7ebe-158d-40f1-b3fc-973cf0d175eb", "sighting--d3230780-0698-455d-8153-8f380c2ffa08", "sighting--c12e2da6-68de-4b39-8441-dab0670205a1", "sighting--bbe303ab-203f-40e4-9d8f-cdfa68e3581f", "sighting--39944be4-b73b-4b29-a6af-f9486d615e91", "sighting--88ecc8ac-70e9-4a55-9c61-9a7b8cc0e2a1", "sighting--2767d912-c464-4699-b316-ed767e97f8b9", "sighting--72c46562-9831-4491-bc74-6b08cffaf15b", "sighting--c7db872b-3869-4c3d-aa27-24e8d1a8d0a5", "sighting--4bfadc0d-25be-43b8-9393-d7b5c2540f0f", "sighting--c24436ef-33a6-45c9-af7d-f2d1287157b2", "sighting--580eb746-1e76-4760-bd39-971693e615c5", "sighting--178d18eb-a2dd-4c4a-b3f5-c75b5c50ef2b", "sighting--7436f784-37c2-4646-b686-f032fe64af85", "sighting--e0f56151-d230-4131-83c1-18151d2ea17c", "sighting--b0de5c2e-da62-4e49-aabc-e229f27b18c7", "sighting--79bff0ec-0761-4b99-b419-9069fee1f736", "sighting--6f4ae307-face-4dec-867c-a5a6855ae4b2", "sighting--60b8707b-3478-4f4c-a65a-211beb181b47", "sighting--6b8d49f0-1714-471f-bf22-ab25b1dc5eaf", "sighting--dee96ecb-0541-4c80-898f-065ea120a98f", "sighting--b8e2560e-bf5d-4f32-8517-f82bf79d2150", "sighting--da139897-302d-4219-a720-65a596dfe8bd", "sighting--0cffacf0-49d2-4856-9578-cfda2e3c1e55", "sighting--c731ea8a-a5a0-4c48-a631-2d79e22b1c08", "sighting--66eda79f-2ae2-4610-b939-ca485c163cef", "sighting--dfaacf08-c842-421f-9889-49d59d76bd83", "sighting--3b2077ff-f900-4156-a3c1-43467946cff5", "sighting--5a7c89bb-af66-4fb4-a408-39006dd30a62", "sighting--8443df0e-8ca8-43ce-9d80-aa76506233c8", "sighting--5d9806a9-d27f-41d9-aabb-1ef3caa250dc", "sighting--a10fcc22-b901-428e-976e-ea4bd7bc1f45", "sighting--43d758e3-4a70-474b-b890-f3608f9ab155", "sighting--ceb68796-766e-4e2c-beca-8251641731a4", "sighting--441d25cc-b711-406a-a87c-3a56e2bc1571", "sighting--86968863-fff6-40b1-a8b1-db054e1f3c74", "sighting--5cd0ec9f-bd71-490d-865b-626153b7589a", "sighting--81b92a76-c228-42d7-a5ed-8091ac147738", "sighting--480c2ede-079e-4453-a602-76b0647fe74f", "sighting--6ff88e53-4c99-4acd-8cfb-09f1a33814ef", "sighting--d8df9c33-dd51-43af-b9e6-7c2a124ce43f", "sighting--449050d6-f1fb-4bd4-9d7a-7a28d209050d", "sighting--5709b58d-6ea4-4b37-b1b2-e8c9a3a7e8e1", "sighting--6a103eba-0fd8-4bd5-ae0d-49042c3eb50a", "sighting--e3b881af-a6df-403f-98c6-f6d38255fbaf", "sighting--271275d2-5f89-433f-9129-e5b5897abf40", "sighting--0ce00e4e-8133-4c8f-b737-aa0b2359dd87", "sighting--c3ce4544-6611-49a4-a3ea-5c3e565a88d6", "sighting--a9e80a72-3ae8-418d-9de4-ffa3b575f61f", "sighting--0595a0ff-2c1c-411b-9819-b567152c98ba", "sighting--e6a25496-9259-41fd-a9ae-9a1ca93b1477", "sighting--c2843434-4309-4538-b97b-5f9fde0003bb", "sighting--f17f0038-8507-4b97-b011-89bbae82f67d", "sighting--c03524c7-b511-4973-a25f-d53c148826c4", "sighting--d4b81333-95a3-4954-b726-8a5eb6f94e3f", "sighting--ad878edc-ef94-4da7-901e-19a8501b2b10", "sighting--0d7a8903-583c-4272-94f6-b283fd09dd15", "sighting--9ef3b25e-68c2-4fc4-bf39-64f01ff22e63", "sighting--bec4fd11-0fc2-4744-9c2b-7f1630fc0138", "sighting--71f7fcc5-b0d3-4f31-8dc3-d197ba12e507", "sighting--64f7ddef-897b-44ca-bbd7-ae87193494df", "sighting--dc0cb0ab-e5db-485e-8b2f-3ab9ce7bee93", "sighting--a41eb52b-5f22-4e84-9bcd-9b3a73f6269e", "sighting--16015add-bbf0-450c-9b3d-4057bde1b7b4", "sighting--ca1dda55-551e-43d1-8f07-d87d18ce2b67", "sighting--7249c4a0-876b-4cd0-9133-6a09688bc451", "sighting--9afe6026-647f-4750-8b21-35717ac90428", "sighting--195dd662-f6e0-4a2b-8012-04b7b5a6a926", "sighting--12cf063d-de70-4845-8774-6ad27c6c9560", "sighting--65abfa04-8f08-4354-b498-7db22167fe06", "sighting--aed80c2a-ad4d-4e0e-8951-f4ef4fc179ae", "sighting--fdcd2497-abfc-4a3c-8576-fb943150fc88", "sighting--b76180fd-25f8-4901-8ee4-7c77ba074be7", "sighting--c3677904-b67d-4b4f-ae7d-0758adff95c1", "sighting--3e2d2ade-5290-49e1-8c8d-cc851e23e0e4", "sighting--3762483f-ef92-44d1-9ac9-ae242598a231", "sighting--c73a82f8-1dc2-4c67-a739-b93989575e0d", "sighting--3f746198-0fb3-41e8-ae49-8eebc8d19868", "sighting--ac700e2c-d94d-4e99-9b83-0e1e04ab9c1a", "sighting--ed8f50d9-8c29-4f41-aa1d-1f1cf852482c", "sighting--d994b324-4be6-4fa8-9298-39b60b72318d", "sighting--7d81dacb-9b3f-4bb6-8071-da0ef0a4e3e1", "sighting--68198375-080a-402b-b77b-382a871726ac", "sighting--6ca93fe1-78e3-4eea-a06d-09be65c1b1c0", "sighting--03c10b91-7594-488f-bc60-5bb82eb61417", "sighting--c771f18c-3e99-47ac-bbe0-45733e44fd7a", "sighting--e25af5cc-d48f-4426-abf3-96bb6cb333ce", "sighting--92099d88-4f2d-49bf-9140-3b34b171a413", "sighting--9e3152af-ad54-4116-934f-f5b6d90bf113", "sighting--b0a88c93-1eef-42fb-9492-9a4ab7b66293", "sighting--56de8239-ed10-4dbc-b424-30465d913141", "sighting--9f894840-b151-49bc-a56a-0a3421efe98c", "sighting--ff34efec-3e68-4eda-85ea-21d173e9677f", "sighting--d6cfd9ff-755f-4884-a4d4-b21ce51faa06", "sighting--8da25c40-5bc9-408d-acc8-43da0c96ade7", "sighting--b3c08f5f-cd52-46e3-bc36-deafb15e817f", "sighting--a0e5768d-cfbc-49de-b5f4-08bc0d5902e8", "sighting--e8e52d7f-49eb-4a02-93ca-c927518210e1", "sighting--004d4e18-8ead-44b1-9649-acea6f3173e8", "sighting--f4c7e0ce-f01b-4b1a-8326-3468be6ce8b6", "sighting--9b680321-cf46-4061-b55e-19dd6b4551e7", "sighting--e24d4bce-b612-4790-b1bd-bfd5aade74dc", "sighting--cea46948-b949-4319-add2-bba84f6dfb5b", "sighting--71f2743e-5cf8-4e9a-835d-17be21543bb6", "sighting--5672b6bc-fd36-4a86-8d52-7af836ee494a", "sighting--3eb5371d-12bb-41f2-ae37-0bbd18a51b19", "sighting--be0557b7-7da1-4821-9653-d6a1c10b60a4", "sighting--b3261826-24fc-4072-80da-dbcb7cd49232", "sighting--b943c2eb-ce02-4f4e-bfdf-c80c8f784f3c", "sighting--3c767311-7569-4630-b2f9-96333a3d1308", "sighting--7979fd00-66fd-4247-a8bc-a3023845373f", "sighting--540d569c-9e29-4eba-b7f9-74e1d63d26db", "sighting--c376e49a-c580-40f9-ad2c-36490058fbce", "sighting--275b246c-5420-4ab5-b13b-745d9944f6a5", "sighting--e187afdd-3a6b-48ad-976d-f740c4379559", "sighting--dd5ca48d-5951-4557-b180-2a639057d11c", "sighting--74a49798-78b7-45ff-b980-f39da0056d86", "sighting--2319509d-c278-4e59-bab8-a9257cbeb8b4", "sighting--cbc38464-eb74-43db-a098-b55b4ac086d6", "sighting--980e5e34-60f5-416b-96ca-6b46885ef327", "sighting--bf9fff30-8760-4202-bad4-9d1ef9105f43", "sighting--faf3c614-4d0d-431f-a41d-ac25e2fc771b", "sighting--2c88f6a0-2be9-45e1-aee6-bfa3f9aa3330", "sighting--cefb2fc3-9999-4f29-a8f7-dcf542d296c2", "sighting--76db4284-ca8f-472a-8b9b-26b6d12743a4", "sighting--2b01bdb4-34da-4b67-9ac6-697aafbcac77", "sighting--482ac3b1-f03f-4420-bbad-e356395da150", "sighting--b6feffc7-480b-4690-aab3-59568ea87a81", "sighting--dbc6b3f0-9a27-4264-9329-b2f9826ad8ae", "sighting--e2da31a7-459e-40c0-a88a-59112b8f055b", "sighting--61a2512d-383c-43bb-a79b-8a6ddb5a7ce0", "sighting--248d5bf6-5335-4adc-b37b-b8f99a8ec5b3", "sighting--71477796-39c3-4ffb-9803-b45cec66151b", "sighting--4ee71fb7-eaf7-4a97-8358-e712c5d4bda8", "sighting--966d1321-4872-4e56-924d-934afd1e575f", "sighting--37ff809e-0d07-41bc-9e62-cbfe96bd4a59", "sighting--755ad401-a9c5-4cc4-926d-a17258b02988", "sighting--1f0239b6-6fb2-4134-9a61-002f9d5ba81a", "sighting--853346f1-2f79-4fcc-a6cd-676582ddea56", "sighting--4a35ea74-687c-44b5-8245-3dc2de0bcf5e", "sighting--cd58efc4-1db7-4b17-b4ac-688ea095f34f", "sighting--609d14c7-b001-450d-96b9-446ad63f4cb5", "sighting--d8295619-c929-4681-be51-01c55091f6d5", "sighting--1c58eb1f-2816-4574-b721-80fef4a7db4e", "sighting--ddb7dad2-363e-45a5-bf1b-f131f9b8ab20", "sighting--8d347e0c-932e-46e7-ab13-a324b4be4fbe", "sighting--2ac65a63-b10e-4679-b674-d2622dfd2d75", "sighting--7505a1da-e72c-46a4-a670-1c6720e449c6", "sighting--65111335-ce23-40aa-a540-e77dfd87c8db", "sighting--3e0552a0-c805-42a5-806f-337c417595f5", "sighting--fc13fbf2-197b-43aa-886f-69d3d1a5f9a8", "sighting--843debd5-d999-4cf8-adc6-9b72159fb939", "sighting--9feb0e4d-48ee-4702-801f-b6634ed1b671", "sighting--4e9a9610-c5af-4a48-b27b-3c92f03868ba", "sighting--3b8b45ac-1d76-4dc5-a9b7-f2dfc9c7761a", "sighting--da2a1a2a-7632-4da4-ba9f-f958b680c9b8", "sighting--f1efdb81-e140-4389-9692-cfe1f26bdc9f", "sighting--cfd9f42a-a1ab-497c-83c6-9289862dd1f7", "sighting--1432def6-90e4-4356-a18f-20bfb224b770", "sighting--d09da727-3202-4c07-9dae-ea1d9f0e9fc3", "sighting--b4b8ab93-cbc5-49b6-911e-739d6bfd906c", "sighting--29312a65-94c8-4aaa-a896-e83eb1e155ad", "sighting--2eacbc9a-2c73-4158-b450-e6d3ac06d356", "sighting--812e4cbc-85de-4d0f-8dd8-56872a56ebc9", "sighting--e0aa0564-52d8-4ee2-8af5-2974e438216d", "sighting--0ee59227-2a68-4d4d-82df-866401c21d6e", "sighting--720f03ab-df6c-4a66-8548-19f436fef66c", "sighting--867fddff-e2e8-4a15-a704-11fb29de170a", "sighting--d9152acd-70ae-4490-8ab4-d59a02b1f1bd", "sighting--19dfe389-8cf2-450b-b91d-e6918530d5cd", "sighting--61c5b11a-c95c-4bc4-b14b-9b5835f4409b", "sighting--17c1397f-0553-4841-a2b9-aa627b8760cc", "sighting--47e1c702-5866-4d46-9f3d-b9153e44c191", "sighting--d0d6fb69-0e4c-420e-b22f-6a9facecfc05", "sighting--091b5563-759b-4627-9718-aa53d52e3b27", "sighting--6554df85-c914-4e5b-9bcd-658834689a10", "sighting--55a4a108-7a33-44ce-bc69-5c9ddbdd56fa", "sighting--7067176d-b546-4796-99ef-11b94fb2eec9", "sighting--d9f570c4-01b4-4a7b-a24a-7afb6b12a764", "sighting--9b53608b-db66-48df-af2d-62a8e2b08073", "sighting--b9781976-9e67-4ffe-b97e-54d6d61275a4", "sighting--90fb8f10-e39a-4436-8c4b-1c48973869d4", "sighting--a6c1a8d9-edff-4c12-9a25-2fd2c386b90b", "sighting--0353d662-2ab2-453b-a2fd-83afe2273bfd", "sighting--96256846-d960-4173-bbef-a8481b1152b5", "sighting--24bc356a-23d5-4bc2-a68d-6b4067ccae3c", "sighting--b4f09c5a-cbbc-4104-9486-0947680a5e41", "sighting--01b7e1f9-a671-4835-a362-98f04c8513bd", "sighting--931f8439-1949-4425-bd94-f7c65b890f3d", "sighting--4ec47d2c-a589-4956-8d03-29b17cb21089", "sighting--c1969e8f-9589-4300-ab53-30162b420052", "sighting--ab627ef2-3c7a-4eb8-be30-ae7eaa2b8da5", "sighting--d3436696-90e2-4802-99aa-0bad3e810579", "sighting--f0e39ed8-72da-4f10-8032-52a055ef3e2b", "sighting--38614218-ab96-4e3c-a004-d6343ee226dc", "sighting--c6af2da4-5f47-40f7-a4d5-d873341a8680", "sighting--8ddaaef2-c2de-4258-a1f2-9a980aa61faf", "sighting--0bcf5c03-4ea3-41be-a947-ebbc90301719", "sighting--1c2264b7-8513-4e03-bebf-7a9c52b097d7", "sighting--0de5a528-604e-4715-852d-9fa81fde866b", "sighting--c481bc93-e178-428d-9e74-7928ef6a92b4", "sighting--98db7cb5-7862-41ca-9df9-0eb0686ffa6d", "sighting--9603005d-45a9-4096-9cea-f17b77068a11", "sighting--1325f023-7eea-4ebd-bd0e-f7f52cce45a7", "sighting--d732d9c0-9d0f-4506-88cd-d23e75d07ae7", "sighting--791f8b88-cdcb-436d-8df3-66f1ae10daa5", "sighting--c5145f74-5cfc-46ea-baed-a8996c4375f2", "sighting--abd49db2-c380-4180-a0f5-5f00cfae1c5d", "sighting--63d24945-2382-478e-85bb-63ab39b1336e", "sighting--fa773a81-18d0-42f4-b7d7-d50722be0c22", "sighting--e1fdd3b9-fa89-4f50-8274-3e98e2bfa7f0", "sighting--2b0f455e-b359-42ae-a2d0-f10db51bbc06", "sighting--3e3a1711-7c22-43eb-900b-5f8490239448", "sighting--1da49b0a-353e-4a31-85ba-06dbf854f62a", "sighting--ac5a4e1b-6cb6-4b48-a126-c7acd5018a7a", "sighting--40a1a8db-5195-45bf-a3af-5f27e068db31", "sighting--b9c30fbd-e517-43c3-bc09-aa0617065ea3", "sighting--b0c6b4c0-5c23-4054-a210-76871fbc5d0a", "sighting--dc555d95-1f30-44ce-88cc-7a8b53318606", "sighting--4df3920b-a81b-4d10-b17b-d6e053666b5f", "sighting--a3578d77-e4a1-4e57-8b9d-0f85a970bda2", "sighting--b6129c8f-6eb9-46cd-87f2-f691d37aa2db", "sighting--8a04d4fd-3165-44e9-a853-444fb1b840d2", "sighting--9121e5e8-456a-4865-b8ea-9c668b51cc1a", "sighting--b27076b4-06a0-44e9-9896-7c93748763cc", "sighting--d60f7451-f179-42ca-9ab4-20ff0618b276", "sighting--f5cbc39a-1401-4512-888f-0637689a0e07", "sighting--2760fbec-9d0f-41ef-af96-12ac9e748fa5", "sighting--dce78996-9783-418a-b9ad-45229c0b9ce1", "sighting--1120a7b9-1b38-4e84-9951-eff4058df530", "sighting--21ffafa4-c360-487c-be6f-4df1d558f5c2", "sighting--eb22b36e-3e65-4237-8c78-83f7e4961f2e", "sighting--efcb4cfa-6e4e-40c7-9a24-49970cfb1495", "sighting--d9553d26-bfee-4dc4-9117-d773ab8c59b7", "sighting--596a98b9-5db1-4476-90dc-93f065b24124", "sighting--d24e8ee1-8a83-43f2-8f03-c44205b2161d", "sighting--2ff764b9-7772-48f1-9b6f-eb4ea1927e16", "sighting--d7a16a26-cbd2-4927-9894-72a28937a9bb", "sighting--0cd52dd4-bb76-4ea1-a479-1a14711fbf19", "sighting--81d2ed67-05a3-45d8-87cd-cae8b7414390", "sighting--e44f5323-ef5f-44fa-a044-b49bd7d4d2de", "sighting--bc35ac22-1611-4df8-8805-eb6b172bfeef", "sighting--f486d30a-3ce3-4d4b-8828-4e50f211d995", "sighting--69ce976e-cc79-4196-85ae-23b24d9aacd9", "sighting--714915cd-c7a1-42d8-bb4a-c109afff1a81", "sighting--a1396cd7-dbe8-4357-811e-24cf4dec87f7", "sighting--becf811d-7e1b-4b8b-8ca5-80c2bf60d94c", "sighting--a91f3116-7f3a-4e97-aa49-9f5e74c02460", "sighting--6db05a0a-2224-4b76-857c-ea84d960652d", "sighting--f6e0f6e5-5b43-41f9-9f34-9691661ca118", "sighting--7d72bd98-4650-4f52-b166-71fe3c06b0f8", "sighting--e6ecc2b0-d1c2-4274-8893-b210fc64d80c", "sighting--5a771ca5-172a-4cb9-b9b8-4ff4a8e2f3e8", "sighting--c546e37b-2981-46df-90ea-27eeca6b2643", "sighting--e2263377-ffb0-4902-a0e6-559a900a1f1a", "sighting--3e73d9c4-cd56-48e1-afd0-f815e1672a00", "sighting--02dbde12-2c75-49c5-8a77-0959ca72ebfa", "sighting--367e5b2b-86b2-4cf3-b347-12a0dc5367e4", "sighting--5dbaa723-e45e-481b-aace-081da47be213", "sighting--7d525802-94fb-43f7-a29e-f9006108873e", "sighting--7cb84ddc-0773-4e9a-aead-e5da3505a435", "sighting--bf5454a8-696b-461c-86a9-9767eb7a5992", "sighting--d23f763e-75ad-4ba0-86ba-47afc7dda1a3", "sighting--3197701d-ae5b-400f-8c51-488db1fba397", "sighting--f0d4a595-3fe8-462d-887a-ddc944b37751", "sighting--e1f58c9e-2682-4511-a8c7-74c6e2cee7ea", "sighting--bb65bb06-6a9c-48fb-93b6-099c3b318c26", "sighting--59c06482-b8d0-403d-a1e2-5fd3dea6c2d8", "sighting--6e468173-9437-4aee-b0bf-b4f04a86bc0a", "sighting--48377322-8165-4fe2-b0d0-b3bc5e9dc961", "sighting--8036c54c-9570-4e3a-a4dc-336ad96fa3c1", "sighting--db5f5bf9-8a6a-4b3d-b619-f500057b400e", "sighting--0e69a152-a951-4d70-8d6a-1a0f750bc5b1", "sighting--8a13aea0-bcf9-4df5-83eb-79ae38770753", "sighting--ef6b7189-5600-4df9-ab08-1c0e2e2802cc", "sighting--92687140-c83d-4e97-a653-0c5810e8bae2", "sighting--c5a91b7c-be4e-4812-bed5-72c91e809ca3", "sighting--b16f2730-11a4-4a88-9880-23955b3bdda7", "sighting--7fea4abd-70bf-4086-acc7-fabdf5fa60c8", "sighting--c1b3252b-53f9-4f19-888b-edfe77762857", "sighting--44f93f98-92f0-4047-b661-5f912c40d3be", "sighting--0e72fcb9-e773-47aa-8e8f-75163c3e2452", "sighting--520ba5d0-74a6-47a1-9fd9-11d1d1dc4be5", "sighting--ba57ff79-4abb-493e-9ca2-394f47cfc369", "sighting--fe09b712-ae06-44c2-98d5-9411efa57709", "sighting--0b215ce1-4ec9-411e-a740-e922eb627a73", "sighting--8d673258-a510-4754-bbe9-02aa01eedb73", "sighting--64919377-e037-4bc3-b255-8a509d1d4370", "sighting--90706771-f51d-4874-a109-38c189283ceb", "sighting--45a4b454-0e90-4a07-bd48-943ebdc509c8", "sighting--3e7838b9-7c84-412f-a9fc-621758fbd8ff", "sighting--c7e7175f-33e3-4613-9856-cf929a0a55ff", "sighting--a68dea3e-7945-42b5-9b26-f0f16a25f125", "sighting--cecff755-eb4d-479b-9aeb-e491a0684e8c", "sighting--32895026-ec3e-4ea2-aadb-92844f0569dd", "sighting--9e09ef30-23dd-4201-9faf-a65daa34a806", "sighting--3957da0b-c04c-4e9a-98fb-9a7b7961fc16", "sighting--e752d51a-be10-4422-aab7-b97fd0791994", "sighting--9f86d4ee-9945-45da-8946-50e74d00e6f9", "sighting--180e2828-0896-4339-b597-5648034b8198", "sighting--99f41431-91bd-4b31-a8fc-0985e93f9d20", "sighting--bba53cad-6a52-461e-8a89-db735621e0c1", "sighting--14ad5ef6-2877-4b8a-9a88-27d4c8710ce1", "sighting--f5171d22-0838-4fa3-a83b-bba8fb8d9c7b", "sighting--5fa261f9-7ca6-4ecd-94fb-6b5614e054b6", "sighting--5f762123-29d1-421d-a74e-917ac4ac6b19", "sighting--7956cc7d-7c51-45c7-ba82-eb34e02a9149", "sighting--c11af0d4-b610-448d-af91-cc1260cbe2e4", "sighting--38bb9931-f8ae-4b3d-af66-3723028fd3c6", "sighting--f251e942-cf06-4474-a682-d85896af9f5d", "sighting--2e43c9e9-47c8-4fc1-987f-f8917f87c6db", "sighting--70388298-8a65-4901-8531-fb1dac680490", "sighting--95f486b4-b687-4347-9779-3cc3c0edcbc9", "sighting--0f43c94a-9474-4f22-b824-370c5676ee86", "sighting--171bdc56-c58b-47b2-a057-74872ded8d1f", "sighting--5b51f2dc-3127-44ae-83b2-c6b9bf9dcf2a", "sighting--219011ad-f48a-461c-b9b4-3d3c4d0a5aaf", "sighting--ec8bf00d-e2ce-410d-a680-2722df43e000", "sighting--b21993fd-b689-4ad8-a612-414d8ac61192", "sighting--0972a405-6ad3-4588-9d13-bb8f9a02e9ba", "sighting--357ffef7-ed61-45be-bd7b-22b12bced2da", "sighting--a65efea2-0d7c-448e-a391-715f2684e9d9", "sighting--f1d34d5a-9cbb-447d-882e-f04168fa55d6", "sighting--587bfe9d-0cf4-42a0-948a-9d1fc0b8be03", "sighting--8ef0e240-8c88-4fde-87a4-da5bf3514a43", "sighting--be53242b-f0a1-4b00-9238-01f647bba87d", "sighting--93cdf9c7-ef81-4da0-a6bb-11286448a90a", "sighting--723d7120-4324-4592-8237-9069fd245e47", "sighting--ae42b81e-2c06-4a14-9648-8a00c588a5c9", "sighting--774f684e-b0e0-4dda-b6d9-0ad9228e30d4", "sighting--5931c50e-523b-472c-ac9b-15d9bf1c2abd", "sighting--cf329e6e-c9dc-495b-92f7-ba48e8217215", "sighting--704784c4-2656-44af-a651-a9c48df13d48", "sighting--0e35db23-2ecd-48af-83d4-886cd8713f56", "sighting--16bd0380-0952-40e2-8824-16d8a34b3ab0", "sighting--73251934-bdb2-430c-9851-54fc1dc6115c", "sighting--d8bbe707-a9a0-4619-8738-06e2605ce7c4", "sighting--81c2333a-7718-4093-b1f6-7be86bc0eb2c", "sighting--62807654-7558-4ea0-82b4-c33645e5c882", "sighting--638fe79e-49cb-40a0-b186-64a79b3cfbdf", "sighting--d4fd94c2-cc16-484b-9325-a4b044dfa88a", "sighting--3d774a61-3b97-4671-a9b6-756c4efc0441", "sighting--2d44e706-4841-4bb6-85cf-9a57fea4fd6a", "sighting--38d5620a-49b9-45b5-9250-7f86d716116e", "sighting--00c17685-9a93-4012-bedb-a6edc3bff7a4", "sighting--bbde2cc1-56f7-4951-8d93-e9edf2cb54e9", "sighting--209bc955-9644-448f-9e9d-b1fe310e45b3", "sighting--bc0c26a6-0769-482b-943b-257983616596", "sighting--ebd58c4b-e550-405b-8355-9e578073ae5f", "sighting--22ada4f4-da69-4a63-a4f5-c56259321fa8", "sighting--40c8bcf9-9ab5-46b3-8738-b33ac9f7abbb", "sighting--ab028c11-1850-40da-8110-34cf9ad291f3", "sighting--27420ba7-f192-487c-ba70-7a8dbcc7a0c4", "sighting--5f20777a-3174-4073-bc67-7ceafc1582c0", "sighting--58ecf64b-39d9-4184-a7c0-df5abb78047a", "sighting--24b7aeef-29b8-4fc4-8c04-f8d8f83c089d", "sighting--e662c15d-3d22-4e72-b2dc-68647fd2773a", "sighting--6ff4f71b-e139-4b27-865e-f40a99329f19", "sighting--d81f898d-e13e-4fec-9cf8-1d028dd1b0b7", "sighting--45158576-e114-450c-abea-1bb4a2dadf87", "sighting--9f136d5d-a71b-4bb2-be27-19c62fd2a13f", "sighting--4e7946b1-689c-46ef-936d-1fa82bfcadb7", "sighting--a707924f-f01b-49c9-8b47-39d3bf99ffff", "sighting--9448df95-130e-43f8-9839-a12d66a1fb1c", "sighting--34494b2d-c9b8-4eee-bc44-fe81c08bd842", "sighting--13d1c729-742c-4343-8e51-15dfc1ef608e", "sighting--0952fc81-7529-49a7-8c23-78085db089ec", "sighting--0fcae4a1-224c-4682-8c9e-71b72c7076e2", "sighting--6f749cc3-0ee4-4ab5-a58b-c8bcb6e7b4b8", "sighting--e58096e0-abb2-4bcc-bd70-abecd9e5736b", "sighting--faa912f9-2e23-4fba-9058-36b83ef75a74", "sighting--798580e4-a21e-4793-9cdc-ca86f14085ac", "sighting--12fa107e-99b6-4316-945c-1a82be19e81b", "sighting--b84bd6b5-7788-4f30-873e-5dbd19b7676e", "sighting--6d278c4b-2abd-4809-9a86-d944d837bdbd", "sighting--0f650ede-4662-433f-926e-5d9620589f90", "sighting--499ad61d-8580-4c87-babe-392b902238a4", "sighting--4431ff25-a0ce-4684-bf01-9df8e040fce6", "sighting--db6c7914-dc32-41c6-88aa-2ed2973a3237", "sighting--b09d5f4c-a6ef-4213-8ff7-699e636d7612", "sighting--44e4ee1e-7e8f-4ceb-bdbb-6ee564125898", "sighting--980d0910-0ddc-4727-a794-bb75fe85d83c", "sighting--e6be3af8-b973-485a-93c8-b2f319fc2f82", "sighting--f3607e02-53b2-4729-bc30-9ef35342d7b3", "sighting--593fd70e-6be8-49dd-81c9-0f48c41d0245", "sighting--be50092e-fce5-4d1b-87c6-c151dbcb2e7e", "sighting--8be795ce-cd1f-482a-9784-886eb37f9586", "sighting--a0dc3c98-29c9-41a0-953b-b90cab10fd18", "sighting--ef561218-ebf4-488e-99d7-e29bdb514cb1", "sighting--73a7f0b5-1fc8-46de-807d-7c2917b63f1f", "sighting--bab9e285-9e04-455c-a963-6cae2a71fbc8", "sighting--99aa7cc5-4a6c-4aa8-bbaf-2db134d9be96", "sighting--35a785c0-16c0-4f18-a9ee-9a723cf1d20e", "sighting--a90e8f68-5515-4f45-b8f6-7a870b574eb0", "sighting--4fef0538-5172-4583-8f49-7dce777bb2e8", "sighting--61b5bd7b-6a13-4246-be5c-473c4b583963", "sighting--2fce42a9-b1fb-4598-8979-15e09c6fcd27", "sighting--6b7192f9-565b-48df-99cf-3275f375c5ab", "sighting--3a3b6c12-ea64-44cd-b752-91aed9c7f701", "sighting--f4ca6537-1300-4c5c-ab88-a5bbd2b17565", "sighting--535d5c8c-91d5-42d7-b122-eba938ad2367", "sighting--fd419856-cad7-4517-90b2-9946ad925f10", "sighting--bffbab10-5d21-46a4-8f92-c4e7af859f6c", "sighting--48c44936-93cc-4449-bd84-3b1d7bb02d14", "sighting--db80ebbc-e2a6-432d-ab46-d02949327a94", "sighting--26930223-7911-4be3-85d6-b42a261142ae", "sighting--3e9f4b82-5f18-44bf-8cc7-afcf44fcd16c", "sighting--31cc485d-62ed-4477-9685-7c358a5a6a2e", "sighting--1ae710bc-b2a4-48b7-b15f-505e6312d827", "sighting--e8f1c8e0-d938-434e-84fb-5c02586ae093", "sighting--090d5e0c-3fba-4156-852b-ee47c66a3631", "sighting--49a4ed11-4f5b-4789-9eec-ec4fd338dd71", "sighting--11b95d1e-abe9-47b6-a951-6dd7c57d069e", "sighting--82774063-7141-4ddf-aa32-a0b5c1d536ba", "sighting--5257b527-9227-40c6-a3fc-80565e93c661", "sighting--7cd14f74-e83f-49fa-845c-e5d4f12d5b35", "sighting--513eb5dc-37be-4458-910c-f65382a2e0c7", "sighting--59cead58-6a68-4487-88ad-572eb3646712", "sighting--ab2edfe2-575e-4eb6-a32f-0e42a3942d43", "sighting--11e6b611-9a30-4e22-9b47-d4af05ab8435", "sighting--ec1c088a-3589-4a8a-a718-4b1753b0aca2", "sighting--51c1b5af-7f56-4731-afe5-e26f3aa6982b", "sighting--30b56f5a-16d1-43e9-b0b1-3da86b35c292", "sighting--5d2c7955-7dd3-4212-bec6-cb786faf686a", "sighting--c2fe6bed-616b-481c-9fd4-4ae6fff20438", "sighting--46354b05-b53b-4f9e-8804-4a0534dc424d", "sighting--74f5a4da-6ecd-4e67-9584-4b6993a5600e", "sighting--ba0c2630-3417-40bf-b38a-7324f92bdfe0", "sighting--0b5cf81f-7a29-4cc9-b1af-926d5f897166", "sighting--b680eb7a-7e56-4115-9c9a-6107df95b514", "sighting--d59299c8-bad4-4f10-b569-5fd5c02f28b5", "sighting--7115fc26-a9b9-4d59-80f3-800db10404a3", "sighting--671b4fe6-edc9-44ee-9721-c63374f5f406", "sighting--c7c35e37-be2a-4d9f-8da7-d2fff5de36e8", "sighting--7f343d6b-4a2f-448f-8d57-5822c8c3dfeb", "sighting--bc38d002-fa45-4eda-b50d-bfa2f854e122", "sighting--79827b95-3dc9-4c6b-9efa-8a9653e1e142", "sighting--eebb367d-d0c4-4775-8384-3a65d633490e", "sighting--80a085ea-ac61-4395-86aa-8c5306315e7c", "sighting--08b30e09-4c41-4ba8-82c2-3727b9594d46", "sighting--3c3db198-8fe6-4d2d-ba4e-e2090fd5ac3c", "sighting--4fa4ca41-91ea-42b2-be69-d2a787b09d62", "sighting--368a126c-b5a5-4613-8e5f-477cac31d418", "sighting--b441a55a-c264-48cc-a96f-23df617a31cf", "sighting--b98257b2-dd53-4ee1-8f8c-722b0bc778e5", "sighting--7b6ea911-d644-4242-8f52-96dfdbfd611e", "sighting--b6303246-8805-4d87-8bfb-0ed0afa86fd4", "sighting--aef1b2d9-dffd-4fdd-b066-ff02cd5f704e", "sighting--a4067bef-8017-428a-af3d-21055280f0e3", "sighting--01262db9-f0e5-48c6-b5e9-fab7b8de8b5a", "sighting--56a47539-30c2-4886-ae5f-e74c055375e9", "sighting--8a903e20-7862-4a43-afdc-6a0ed7729326", "sighting--f7ef5919-82bd-4e79-b362-189cd2e9c5dc", "sighting--1c37452d-f6d4-4e6d-8218-fcefa4e1b60d", "sighting--bb2f3932-aa10-4d59-8fb6-8cb3e32154bc", "sighting--9be66f48-b949-4178-af52-02ce6ed1daa1", "sighting--fa23d356-d871-4822-886c-b998d428ab4d", "sighting--9d5d989b-cad2-41d5-b972-8d6d09ff515a", "sighting--a98ac63f-76cb-4601-bd97-547314ae93ed", "sighting--6a2c9521-5790-421e-bd5f-ee7dee87315e", "sighting--f731affa-be49-4f02-be70-030af625f94b", "sighting--3d4d9643-5ff3-495f-8984-449581eb8bc1", "sighting--6fd214eb-ddd8-42f3-9dcc-f9553e3aa9e1", "sighting--aeeb33fa-676e-4d90-b368-1851af2a062b", "sighting--5e09bfe9-c548-469c-a407-8c0cfcdc450d", "sighting--d4cabbdb-b680-400b-af97-45d4b71f91c1", "sighting--4effe259-cdc8-47b9-a823-78167d7712a6", "sighting--e8d11b8e-8a77-43a3-b6cb-28eed70557c3", "sighting--d915463f-12ba-4435-8d39-80b3157c7586", "sighting--b5b85af1-d2a9-4595-a8e0-a179aae949b5", "sighting--f00c5fe9-bd7e-4082-bdb5-9de0bdbb19aa", "sighting--7b1cdcbe-b16e-4bcb-a990-f6262a36eae4", "sighting--3877cb26-bb6e-4ea2-a652-8e3073177951", "sighting--35402479-610c-432e-a374-d9783d0f5067", "sighting--3a158cb0-7d21-4e0a-8ed7-44cceaa2a5fc", "sighting--333e259e-5963-4599-9dc4-4d9232a5362d", "sighting--e0739caa-cc0e-4dce-a562-2d9fe1a40b4c", "sighting--4c93493f-124a-4409-afa2-e8fe325d2bb2", "sighting--a14c83fe-3aed-4c3f-afb5-19851416d8d4", "sighting--f083c565-dbd7-408d-ab6b-227b891dee05", "sighting--33da0e31-8529-4f71-83c6-0567e175d1e3", "sighting--6035f642-03a0-4677-aeb4-5e608d4b718a", "sighting--8149c697-07dc-47d2-a0e8-552cd2ff001a", "sighting--bf9f4745-e08c-430b-92fe-4f779c3b659c", "sighting--a5919913-76dc-45f5-8e26-de1c3906ad87", "sighting--26467c50-75af-483c-a825-d9ed43519aaa", "sighting--fc549ec1-3380-43e9-bd37-7d6ff99034cb", "sighting--2507deba-433a-4253-bada-3dbf7805b8ec", "sighting--00b9d625-e22d-4a18-9372-248e81909002", "sighting--946e1b27-f6d1-47d9-9578-8ead380781df", "sighting--5c069f98-20f7-4987-9edf-b041b2f75d6a", "sighting--0fd6f97e-de17-463a-a337-ac42233a7406", "sighting--431b8dfe-fa39-4136-8979-792481ffd86d", "sighting--94b1869e-3b04-48dd-8999-42dc9b4a9553", "sighting--3cd0be0b-fe9c-487b-8131-ff7ef71c0e0b", "sighting--bee77ec8-de0c-4356-a7e2-4e7141d6d1d7", "sighting--754b5b09-0bed-43a5-9ae1-28a9df18691d", "sighting--2a8d3362-61d0-4d00-a13d-be2dc7493389", "sighting--7f2d12a4-6648-4488-9bbd-c9ee24629f94", "sighting--5406d7d6-16cf-45bf-a73b-4737d7860c19", "sighting--9c049add-f8dd-4122-a523-3687e294db7f", "sighting--11566d6a-ac45-443b-93ac-6cb8fe4bb835", "sighting--a25907f6-e64c-41b1-808b-2dd0ef717bb9", "sighting--be378a19-dfb2-4b82-b3ef-f37d5f311844", "sighting--fa58d03a-007e-4cfb-8796-8da72f5bbafa", "sighting--f4a5e449-d236-4dcd-84a9-7088eb896d8c", "sighting--9178d765-36e0-4888-8a15-0204e9e5b922", "sighting--405d3d44-32c5-428b-8b61-5f9169967dd8", "sighting--1511e744-fe8c-4add-ba18-542c17282ac3", "sighting--e74c01f6-7a68-491f-baad-603ceffb004a", "sighting--39fa8187-8ecc-4c16-8bb8-e7b304f83c43", "sighting--9666eb8e-fbba-4cad-8fc4-99afb54a7c5c", "sighting--0781b284-53aa-4795-8dd6-ed90cc79a15b", "sighting--83e6b7f2-b238-4045-811f-42b2a091e39b", "sighting--83bf741b-abb0-46f0-a643-5779dd864c40", "sighting--21681529-b664-458a-adf8-a834fb4f0024", "sighting--d65435c0-b153-4b82-989b-dfd4f303482e", "sighting--46293d4a-d23f-4284-a94a-d66e64bb69a3", "sighting--87bafe3b-acf6-493d-ac55-e0a16d11030e", "sighting--d5def566-2025-43ad-b654-8e69867c380c", "sighting--92de2009-c2b7-4e79-ad80-0352f2e77950", "sighting--56323a6c-06cd-4f2d-a3d0-7266e3c40f04", "sighting--3c88d52f-cf73-41d1-ac13-41fc95525d6f", "sighting--05f4c1cb-ff0f-459a-a98a-e0fed6005da9", "sighting--582a2adc-6e14-46d3-8e66-dc2ae2ae13f1", "sighting--e4551110-be4f-42e2-9173-7ba82562584f", "sighting--c8ca5b24-c20c-4887-8ad2-8907a2473bff", "sighting--cc5a490a-5ee9-4577-b2f1-153b1be8c319", "sighting--e6b149ae-3d17-45b5-96dd-b52b17b61018", "sighting--96210228-aa97-4d85-91ff-d4452cd15616", "sighting--0cff8bd6-0247-4429-b172-56edb1e53107", "sighting--af8c14e2-d6b3-42bc-818e-1b6a3663761e", "sighting--a790bc20-58e6-4af4-a276-b8d7bfc51379", "sighting--627cee4b-38c1-41a7-a6aa-2203db18f9b3", "sighting--f932f866-b7ba-43f5-b890-513ba402d368", "sighting--574c1fe4-b4da-4a50-afc1-c028b6ba3d3f", "sighting--3e1a0e5d-eb74-46cd-b180-201265988646", "sighting--04a6f9ad-db7b-4323-b86c-bf4009889c40", "sighting--1660175c-1cc3-4839-95b3-333ccb6d1f00", "sighting--200bf5fc-9b6c-44a8-8154-c1ab16a5504d", "sighting--31877acb-cfd3-472c-9d4b-a6f671051e2d", "sighting--f88ba83c-b7c5-4e50-bb79-78342f9127c9", "sighting--e88a742d-cea1-41eb-a2ee-c7fb71041f45", "sighting--ab6dda30-866a-46ab-849c-5a997d75419a", "sighting--f0785fc2-5026-4b33-8195-eb5b372852b5", "sighting--1bff554b-4a85-482f-9628-6d9598dfe7a5", "sighting--016a5d0f-8b2e-4865-a37a-8f7e993c466e", "sighting--3a154b3f-d185-410e-98a0-89f79deba7fa", "sighting--16cbf112-55d7-4dbd-9f9e-b13f31e40ac8", "sighting--cd382322-645a-4bb8-9874-1253b1df27f8", "sighting--505cff93-71f7-415d-b55b-af1e9ab9634a", "sighting--23ef44ac-bac5-48a1-9e8b-7da1814bc987", "sighting--5d756bd5-e858-45b1-87e7-77eaaf6a52df", "sighting--cc743c11-28ba-481a-abe2-280f857fac21", "sighting--dd1ad4c8-6bb8-486a-af25-9e9044830af5", "sighting--45b73966-9288-404d-9ffd-943a204c1078", "sighting--0bed458b-deeb-4e1d-a2b9-ca654ed8d39a", "sighting--f8e869fc-87c4-43b9-8bb0-09f6595d4f2c", "sighting--cbd0f4a7-e860-4db4-a8d4-fea645aec443", "sighting--99e58dff-bbe7-415d-bafb-483930869744", "sighting--9326e98f-88ba-4839-bfec-b332ea0491a0", "sighting--df6f9c0c-26b0-4a1c-9152-829fbc190924", "sighting--1ebd4596-d81f-4b91-8cd4-7afe9b259b28", "sighting--18c90c3c-1b55-40a8-862c-dec9ca622228", "sighting--2269d06b-8af8-498f-84b3-ac6f5510c83c", "sighting--3c1e1e22-b739-44f5-b9da-a299e0c1c617", "sighting--4f719255-062c-403f-a71f-48299e08b76b", "sighting--6892eb3e-c00b-4e70-a702-104ece19afa6", "sighting--be9e90d8-2b51-4bb0-a72b-da58e4957afe", "sighting--aec68ed3-47f5-4adc-b951-60f0172a0e53", "sighting--9fa92033-0015-4f1e-9e2d-aaac38335b22", "sighting--211497bb-a0ef-4ed1-a96a-0e5ffeb347fe", "sighting--f5ac5a27-d551-4c81-9e39-7fbc4273f659", "sighting--10e0237d-dbd3-4587-a103-d8ab362487a4", "sighting--08c42a5e-ce82-46e1-a00c-96397e4ebb65", "sighting--74fbb56a-11e0-4e7c-9958-d79f70b0daf0", "sighting--d15d7fc6-2ea2-4a99-b53f-2e7344f064d2", "sighting--c1c18a66-1f6a-466f-99a1-db6825d31f30", "sighting--0c16993e-4e83-4f85-8219-63b5726a344a", "sighting--356e08cd-e75a-4deb-ad5f-08003dd684c9", "sighting--f7da1218-c567-4376-9f3e-5baaeb9d72ab", "sighting--ff38d16c-fdf4-4994-a14b-63dd70e2e7de", "sighting--669a15d6-eaf6-46ed-8e36-2726ddb989c0", "sighting--8bce7f36-8095-49d6-aba6-3a57a0fae14d", "sighting--97510d7e-807a-4594-840e-045237ac7b28", "sighting--aa52e7dd-7aae-4cd8-97e4-35d76cab2ae9", "sighting--4eb3e1e1-4293-4d40-bc05-0720d149dd18", "sighting--329f786b-1a3c-452e-bc77-ae5b5ff9d305", "sighting--58ba4dbe-911e-4674-b7c4-8cde706a7533", "sighting--38594793-eab4-42fc-b846-26ad0c33c6f0", "sighting--4d1e4a4a-7bee-48e9-a86a-ddb3b4ec3bd9", "sighting--e9dd24dd-f143-4567-8497-6554ba8aaa15", "sighting--b3c0a420-cd4d-4380-9c2d-7d35b2e3df8c", "sighting--16b9d390-9252-4dce-8abd-17d42cb1de98", "sighting--ac1db559-0bc4-405e-85ec-2dba8262c2c9", "sighting--b7a2aff6-158c-4ce7-abdb-ddc015ad4671", "sighting--366d7a10-601a-4b68-a677-02cb8bfc2d16", "sighting--8a7cbf54-6d19-4e2a-9c3a-eeac56fb67e4", "sighting--6e8ba76a-34a2-4729-b9f3-ac5838a60c24", "sighting--e12f9310-89bc-496f-b760-07773019048d", "sighting--3aeb5523-3587-49a7-9919-4aa34406d8eb", "sighting--d1176310-d1d3-4f99-9623-57a12ad779c4", "sighting--35f7ee8f-3ac6-4c1b-9ccb-ca8c3ed3a6b1", "sighting--22fb4694-efeb-4943-929b-b409f02eca55", "sighting--f2bafa6a-4676-486a-b5d1-6c234efac42f", "sighting--7a287153-448c-4326-88dc-6821175ec854", "sighting--7ce4027f-e63f-4fb7-a6da-f239d2a8706d", "sighting--381ef198-73e3-4cc5-bb05-edddb7dfc318", "sighting--2e293299-e1ae-40e2-9f17-7a96eb021ffe", "sighting--06c74c2e-219c-4691-ab07-6a8602534e4c", "sighting--405583fa-1355-42c6-86e1-3b9ba19b3fba", "sighting--9b2810ba-974d-478b-8514-520ae07c312c", "sighting--d86d2147-5a04-49d7-8bd0-30c4485369e0", "sighting--6a0c3885-e61f-446c-91af-f10f68796796", "sighting--a97e5fba-899a-45e7-b176-ddc224ba3611", "sighting--ecbaf8b6-dd3f-4b82-b9dc-5655a59886c0", "sighting--b5838be1-28e6-4a24-a9d5-161e2e1b2fd5", "sighting--25b59672-0bf1-425b-9889-4a855f2ab67f", "sighting--58b35b55-d16f-41f3-a2a8-7e878ebf419e", "sighting--ab16f7dc-b5a6-4afc-80e6-1e676418c63f", "sighting--e11c9d71-ade7-466d-8187-03740bc5f499", "sighting--051703d7-3a3e-43c2-9ec5-20917cb12b22", "sighting--e643b8c9-cc89-4b21-9332-e46061d88c44", "sighting--012a33c3-3666-4845-9f21-fe110c43c3d3", "sighting--5a34c9b8-b9d6-45d7-aa12-b0832833e5dd", "sighting--cc234398-49aa-4a4b-b71a-f29e3c6b73e8", "sighting--c88bf295-1a7a-4230-9772-3f587d0f2c27", "sighting--13278565-d9f5-44f8-adeb-3de5092b8cff", "sighting--92c1df52-b268-4d2f-8d21-79107cdf646b", "sighting--550010e9-bb81-4bb3-ae72-7f9ce036de7e", "sighting--99851a6d-c9ed-418f-a30d-2c4c252c7006", "sighting--5f571440-0d86-4490-8548-543b6abbf995", "sighting--a09a632f-c491-4146-a2d8-8c74482ffde8", "sighting--b65e8f4d-5246-4fb9-889e-40c43a5cadc7", "sighting--c5359e4f-e6cd-47dd-8ab5-8cf27abd7d88", "sighting--95284f4f-043a-42ec-aaf3-52dd64698a7d", "sighting--58d817e7-44cf-4f2e-99eb-6018f2581b96", "sighting--87f6ba5d-d7a9-4e33-b827-81c629f99ab4", "sighting--30e5ec0a-0787-4a4c-8988-cdb250ab891d", "sighting--53693054-9a1e-434a-a740-d67b2ae9001a", "sighting--881b8b3e-e8f5-4724-acbf-6b3ef5248f1b", "sighting--58f940d7-5c57-4300-b64e-dba9bb9e2fac", "sighting--8e2baf22-9dc9-4f14-8f49-65ad475e8406", "sighting--d78834b9-74a0-4c16-8dfc-8ece3a66149c", "sighting--ccda7eaa-3616-4ba3-aca3-7ffd8f96ddec", "sighting--5014eb9a-d9d1-4dda-8956-43daabbc5ba1", "sighting--9f4ba008-586d-4084-9410-280593eab6c7", "sighting--2c84f16a-b8d9-42da-bdab-b4b2d394d29e", "sighting--2bd4dd1f-45e1-4dde-a9a0-2234f9a4663f", "sighting--de1e8ae9-e752-4124-a256-ffcb844ffdc7", "sighting--b6054198-90ea-4d03-af8a-dacbda3c40ad", "sighting--ada925b8-64f0-4661-ab3c-fcd774584b37", "sighting--4acfefe2-6e14-4110-9837-6d6171b003fc", "sighting--3e5eb4c7-fffd-44fe-942c-897c2cc06e2c", "sighting--6a546431-0dac-4a2c-ae5e-a8c73bd2d12b", "sighting--fba62949-12c3-4f0b-bc25-5aa9e203af11", "sighting--0fd29601-19ab-4259-ae11-493d4d220622", "sighting--36d7e675-31cf-4b77-9643-2d73541c5d73", "sighting--8a287c3a-2866-4e55-8840-070efee62019", "sighting--14ddb996-4fbd-4e31-a3cb-1f35f436401b", "sighting--b0a24712-cb29-4b82-bddf-a892f87bc171", "sighting--63cce2fa-a700-462f-be45-00777dd7b27f", "sighting--639a6430-a401-445f-b361-aec5287e270a", "sighting--46cafbce-50af-4f27-995f-74e4fcb06c5e", "sighting--4473187b-b47f-47a0-9527-d6ae2949641f", "sighting--d821ddd3-570f-44cf-86d4-914d47a28b81", "sighting--bcca845f-ef00-4341-9705-5748e0030e70", "sighting--ed7f9af3-dde0-4bf7-87f7-1b7aa6962bfe", "sighting--cfa30ff8-6ac1-4018-84fc-0e8f016f477f", "sighting--df84a97b-4c8f-43a5-9cca-2bde1444825b", "sighting--5f4a04f2-df31-4e2d-9887-ded2b46a2fd9", "sighting--9789aca2-8de2-4d04-86a5-abe4c8b73474", "sighting--2af1931a-d5ed-41bd-b09c-16a25121755f", "sighting--bc150779-afe1-4242-9124-def393e5e520", "sighting--c550a77f-3466-45ff-88e4-47b0e9158686", "sighting--f589825e-6950-4ca0-869d-5486884264ca", "sighting--f54f7321-8bff-4e71-9776-ade6f23ea99f", "sighting--04f6e1f9-e5b0-4817-b96d-92e80a9763c1", "sighting--da9195cb-a210-4c9e-86b3-d03951d17f6d", "sighting--d31cb34e-9d9d-42b0-99de-9d8930ad4dc0", "sighting--2b327dbb-2c8d-45ac-b767-d75402136e4a", "sighting--36e2e6ec-1900-41c2-997d-94dd2a333417", "sighting--e0e31ea4-24a3-48d0-9157-ec49f17a84af", "sighting--8223ac9b-ab36-4101-adf2-c359691be2fd", "sighting--95b8c607-69f6-4e8e-b3af-0a28015d01d5", "sighting--d2e24608-2492-44db-9c6f-0cfb3681aaf8", "sighting--7630dc4c-2e22-4b43-8628-4cab91d0354e", "sighting--dde00338-0d77-4496-b8aa-5a75f6a0f029", "sighting--2aaa5949-d058-41e3-936b-e4277649b479", "sighting--87bf538f-2666-4389-826f-7b324e1e9ea1", "sighting--9bc24a3f-e23c-4f3c-9e06-f660c74dfee3", "sighting--dd60360b-36b0-4038-a80c-0137d4295731", "sighting--ddb73fad-ffe0-46f1-acbe-9fbc9f68e141", "sighting--1689cade-7155-4302-8f27-3ba45c24fa4f", "sighting--1f0b8d9a-2c4b-4d2a-bf1d-71792b4d4746", "sighting--31a2ffb7-e77e-43af-bd8c-f44387cb1de9", "sighting--7c3902f5-8a68-4102-b77b-6d6555464cfa", "sighting--c4f92dad-7e1f-4dd8-8665-b10fbb23d97d", "sighting--081e8d94-b49c-4996-9bb5-844ba191d10a", "sighting--967ef0e2-6f33-4549-97ad-05ee87396a3f", "sighting--43ff95f5-3e06-43d1-9f35-0cdf3c133c43", "sighting--74d91f4d-6378-45ae-ac78-74a00b5acb4d", "sighting--10e6c8b9-a2a4-49d8-a1fd-58dc6c4c0ef0", "sighting--5a0bc8f3-c479-496b-985f-9d1ddb90f18f", "sighting--53bcfa04-c65f-40c9-bb8b-7f58711fe2a4", "sighting--d7278d13-fa48-4734-88fe-11e61b856577", "sighting--79f8c165-8243-46a2-bd1f-cc18d32951d2", "sighting--f78c42c9-1c54-4747-ad00-693359090e6d", "sighting--1a44d8ca-2bb2-4847-a8b2-4e48ec300124", "sighting--9eb3a917-66a5-4473-8c79-fe00f0529ecf", "sighting--e3da1c32-b04a-4cfd-869f-dcec18311c9d", "sighting--ffb09254-36c5-462e-acea-cee1ab51baad", "sighting--0284efbd-8403-40ff-acc7-9bf24aeb9131", "sighting--d86c3f16-f426-445b-8a91-df09ce15cc51", "sighting--e7dbd8c3-1b50-490d-911f-6a566431fd98", "sighting--1ecaacb4-84ed-4a66-9c3b-8cbb097f3a4a", "sighting--1e0c9851-2a53-431c-a66f-7bcd51824fa2", "sighting--5f6b2cf8-3a06-4f6e-85ae-a797dd558456", "sighting--8aeec596-e782-4139-940f-b81f117d8fa6", "sighting--fa1415c9-d17e-43c0-8bdd-d8a1a08f11fb", "sighting--6763cc4c-929a-4f33-b4cf-4528d92f396f", "sighting--64f35276-f9ea-4851-880e-7d4de80f14da", "sighting--99c02516-f6a5-4edf-846d-dcb64828a37c", "sighting--9442524b-48eb-419a-affa-74e150db1a3d", "sighting--7724024b-69b8-463e-8130-124d8730cc1a", "sighting--884fc316-439a-4536-ab48-06c126e40a24", "sighting--bf7ab401-3644-42b5-b3a5-2225b07810aa", "sighting--0827dce0-e4bb-4a2a-9a06-045545d5ef7b", "sighting--5e1d9f64-cad7-4805-bd63-62e61804acdc", "sighting--9549b929-9e02-4674-9a0e-828fa71e5326", "sighting--80c6eb98-5e83-4ef5-b2b2-1b920580e02e", "sighting--512beb30-752e-4571-a6e0-b9595fdde621", "sighting--8a026fff-890c-4db6-9642-10f8d61282ae", "sighting--8dfd45a8-38d4-4e19-b79d-2c0598905ea4", "sighting--67c51488-ce3a-4d46-ae19-7107623a75b9", "sighting--7b212049-ec47-48a7-8891-c53a00c9a68d", "sighting--d23e34c3-51ca-4cbc-a81d-b54cae9aa42d", "sighting--d9c2177d-a4e3-4669-807d-c3b969cf6e2e", "sighting--3a9aaa74-88a6-4594-96de-b64974355795", "sighting--4b18cb17-5582-4451-ae43-ab33c555c0da", "sighting--8de58ce1-a73e-47a7-a670-f1e5f0ecd5e0", "sighting--8def460d-ed07-40ee-8295-3bf28c808a0e", "sighting--0815bca6-e809-4bd4-8831-a610577ceca0", "sighting--a151c682-0c14-4d96-8c4f-fc3868969280", "sighting--681cc1e2-1c18-4838-87b0-9d60a10c4719", "sighting--b8bf732d-a5f6-49c0-a18a-5168a5125b8f", "sighting--28af9c84-ae37-4cae-9e2c-9cfa9c94f76e", "sighting--d15c63d0-991d-49e3-8675-b5d8f5442d02", "sighting--61bd5b89-eb2d-4c6b-8ea7-42b99fed34a3", "sighting--46f0f41c-7e45-4923-aaf4-fd88422e4b3a", "sighting--635cdf82-79bf-46a5-be0d-f6a0dab306c9", "sighting--b4246c14-790c-4f33-b4d1-575afb68015c", "sighting--90d489d0-9b66-4a69-aa6e-f84fb7ef4813", "sighting--e4a7ab89-83a3-4e5a-8c94-1c8dbd01f3cd", "sighting--864a4030-9ef2-49d6-9f57-251ac889ef93", "sighting--061e27fd-43c6-4a34-9b66-bee2a7c8e10d", "sighting--52d3666d-a915-42f7-9ec0-e31fb30dde36", "sighting--0fc9d33d-a091-410d-973c-5fc5e0a90978", "sighting--3ee6d6f6-7c86-4bd0-92c4-c2466dc3a0fd", "sighting--2602a16b-0d38-4914-98d6-581b3dbe99f4", "sighting--082094d4-fa4b-4d76-bcf9-c17c4d90e1ba", "sighting--6b04c6cf-7872-4513-ab83-620360fe51fb", "sighting--8178b56e-14bf-4c2d-b868-2195e82123ce", "sighting--251dcd27-ac57-41cf-b244-995c42d30fac", "sighting--327c9b3f-f6a6-41f9-aa16-4784b5882d7d", "sighting--8474acb7-7d35-494a-aab0-1712ea84b7f7", "sighting--66e6c848-9680-46ff-a1a2-d15378547cf8", "sighting--e897d569-3c0f-48b4-8dea-567bc87c0da6", "sighting--ec93b6d4-a480-4601-a422-97c6d52be566", "sighting--3730632f-a4b9-41ac-8ba6-976d7c4280e3", "sighting--cb3a8d26-c38b-4aa3-9eb2-60cf0c413cb8", "sighting--5575732f-81df-4b3d-9682-c82c8a1c7d61", "sighting--a816216b-2dfe-4e38-ae49-75aefd455fd8", "sighting--f6d56ab4-2f27-489f-a40d-c2d288dc895e", "sighting--ac0bb134-7c9e-42a3-8340-2984c3ee3043", "sighting--2f9a49f6-4800-4178-ae7c-9567a8a609d0", "sighting--573b4fb8-6d51-4925-8079-7ac88de56d15", "sighting--a7f2e931-4765-4b53-81a2-605864db4d24", "sighting--d32c5437-1df9-4226-bd9e-ee07bdd86ff9", "sighting--33596c3b-751c-4a97-9ca3-baa0bae1539c", "sighting--9055d08c-4476-4b09-b9df-0a873298bd65", "sighting--babf83f4-1893-4fec-a268-ffaa7cb2c370", "sighting--4c102633-e4e1-4e18-a8af-87a94a016804", "sighting--85c37ab1-0f91-4e5f-a095-7365d3676223", "sighting--09dfb908-a256-4b88-acc8-db0e8a74ec2e", "sighting--832bfc47-e323-423d-be7a-f178d93d9728", "sighting--8cf6ff39-ce71-4c27-b6d0-65d9f9f4b146", "sighting--d082451d-4b44-4363-b0ac-1853911400de", "sighting--fcf7e3ff-43f0-4740-a12f-5919fc24baef", "sighting--db372d0e-2677-47cd-b937-3b9b8c3a273d", "sighting--867424df-24d0-453f-bc78-23da78475872", "sighting--2734ecf6-6e75-4ad1-a2a5-ae457879e620", "sighting--4f22634f-e083-4cf5-b06a-764689fd5887", "sighting--5e0226bf-bb8f-40e4-86db-1845a56b28d6", "sighting--31d68fad-630e-49e1-9021-cc12b3c467d3", "sighting--8ab7ad67-aad9-4f3a-b464-e62305979d58", "sighting--ed9dfbfa-f36b-4547-a312-47c5de5d0c16", "sighting--4e3d44ee-f56b-4f24-8847-ee1928a74fa3", "sighting--90f8ee55-b287-41c4-ad3e-aa4d7727e5d5", "sighting--dddcbb0e-4646-4606-9a48-bd272b30b8bd", "sighting--a7a6eb20-be47-4d6f-b6cb-80dc61f29dbc", "sighting--1dacf455-fbb4-4d81-9f5a-a66cd001d75c", "sighting--be25aea7-1760-4153-9298-e9f7ecfa3a15", "sighting--a0200b60-7716-4dac-8aa4-735705dd13df", "sighting--b88ff24d-6b78-4328-9af5-6e7d458b26e3", "sighting--1df57f2e-f366-4a9a-82d2-5845d27fff83", "sighting--401960f8-17a1-47a5-a90c-52e9cfc2cac0", "sighting--1d7279cc-0878-4fbb-a5a4-4e6d96a99db7", "sighting--c1cc9be2-0213-4a2a-b1a9-608fd0de14f2", "sighting--64644fd4-2b8a-4cc6-8669-195afaef8b33", "sighting--6a9de25d-1af8-413a-969d-b7389bf22b78", "sighting--6d585858-dd81-478e-87f0-9e8cf08b9ed1", "sighting--4a2c4729-2db6-4ce1-94cf-b62d71c6db97", "sighting--48fd10e7-d026-4f69-bfb7-1913c5c2af06", "sighting--58f21c65-a68b-4b4a-9548-5ecb44df5384", "sighting--3d39cd66-c99f-4f7d-aa74-150a39c03ce5", "sighting--faab786a-cd97-4ca2-9b81-4529e8481c6e", "sighting--6e4d73f4-71c2-4b6b-9878-f33d807ddfc6", "sighting--26083413-9f6b-4132-875d-cab25b49e2f6", "sighting--9bc33346-218e-47d8-80aa-c1a6a924c6ae", "sighting--9f27db3d-066e-4341-b9c9-6a19c636cac3", "sighting--55a2c945-b9e0-404e-ad2a-166e9fbffcc0", "sighting--7df27232-7070-4f33-adfb-68d71655baf0", "sighting--c8651bc1-1cb4-4fcf-9b7b-c0db10244c6b", "sighting--fa6d1d19-920f-4f75-aa56-9befbf374d18", "sighting--5ffee297-889a-4e74-af7a-9481e68cc801", "sighting--0e7a3d0e-87db-4c2f-b2e7-79cc0f4ee375", "sighting--fee7c243-4722-450b-b073-013ab6fb59e4", "sighting--76ef08e5-04d1-49cc-a690-7d2fa7dc8240", "sighting--5dde72cc-02bc-44d3-9ab1-b8b88ebf59dc", "sighting--6a427270-63a8-41a3-8a9d-d2826f5791cb", "sighting--4113519b-6cc7-46bc-93a8-ab980dc08b9b", "sighting--d38039e0-4b31-40a3-85f2-29a14db72800"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-03T11:00:01.272Z", "modified": "2026-06-03T11:00:01.272Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": {"tlp": "white"}}]}